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EYES  ON  THE  ENTERPRISE 

New  Nortel  CEO  Mike  Zafirovski  wants  to 
do  more  business  with  corporate  IT.  page  4 


•  -'v.-V.  V  - 

’’-TT-'TE 


1  '  .  . 


. 


STORAGE  DEVELOPMENTS  WWSSmmm 

Continuous  data  protection  and  iSCSI  products  are  dhCCiC 
to  be  announced  at  Storage  Networking  World,  page  14 
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Banks  Hustle  to 
Secure  Web  Apps 


Feds  call  for  stronger  end-user  authentication; 
FT  execs  weigh  tech  costs  vs.  business  risks 


BY  JAIKUMAR  VIJAYAN 
AND  ERIC  LAI 


With  the  clock  ticking  for 
banks  to  comply  with  new  fed¬ 
eral  guidelines  calling  for 
stronger  user  authentication 
measures  during  online 
transactions,  companies 
are  rushing  to  evaluate 
the  various  technolo¬ 
gies  available  to  help 
meet  the  requirements. 

But  in  many  cases, 
the  choices  may  not  be 


Bank  of  America's 
authentication 
upgrade  hits 
a  snag: 
QuickLink 
57749 


cut  and  dried,  IT  and  security 
managers  warned  last  week. 

“There  is  no  one  single  tech¬ 
nology  that  is  appropriate  for 
all  your  authentication  and  au¬ 
thorization  needs,”  said  Robert 
Garigue,  chief  informa¬ 
tion  security  officer  at 
Bank  of  Montreal  in 
Toronto.  He  added  that 
banks  “have  to  look  at  it 
in  the  context  of  the 
business  value  at  risk” 
Banks,  page  62 


Hurd  Makes  Vow  of  Stability 
For  HP’s  Core  Technologies 


ONLINE  EXCLUSIVE 


TIME  FOR 


CEO  rules  out  major 
product  sell-offs,  sees 
further  acquisitions 


BY  PATRICK  THIBODEAU 

ORLANDO 


Hewlett-Packard  Co.  CEO 
Mark  Hurd  last  week  outlined 
the  company’s  technology  di¬ 
rection  in  broad  strokes:  No 
major  product  lines  will  be 
spun  off,  and  for  corporate 


users,  HP  will  focus  on  its 
core  offerings  of  servers,  stor¬ 
age  and  management  tools. 

Those  comments,  made  at 
the  Symposium/ITxpo  2005 
held  here  by  Gartner  Inc., 
were  the  most  expansive  pro¬ 
nouncements  Hurd  has  made 
on  HP’s  product  plans  since  he 
was  hired  seven  months  ago. 
Other  HP  executives  speaking 
at  the  vendor’s  own  HP  Tech- 
Hurd,  page  62 
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Use  our  Smart 
Salary  Tool  to 
compare  your  pay 
with  that  of  IT  work¬ 
ers  in  similar  jobs 
around  the  country. 
computerworid.com/ 
salaries 


It  was  another  year  of  skimpy 
3°/o  raises,  according  to  the 
more  than  14,000  IT  workers 
who  took  part  in  Computerworld's 
19th  Annual  Salary  Survey. 

But  they’re  finding  consolation 
in  slightly  higher  bonuses,  a  bit 
less  work  and  lower  stress. 
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Emerging  Technology: 

WAFS  Goes  the  Distance 

in  the  Technology  section:  Driven  by  consolidation 
and  compliance  requirements,  IT  organizations  are 
using  wide-area  file  services  technologies  to  bring 
branch-office  file  servers  into  the  data  center.  Page 


NEWS 

4  Nortel  picks  a  new  CEO  —  its 
latest  step  toward  regaining 
credibility  with  users. 

5  Cisco  links  emergency  work¬ 
ers  with  a  communications 
system  that  tries  to  solve  in¬ 
teroperability  problems  by 
connecting  via  IP  and  SIP. 

5  Mississippi  enlists  Bl  tools 
and  geographic  information 
systems  software  to  help  with 
disaster  aid. 

8  Cisco  upgrades  its  Network 
Admission  Control  endpoint 
security  tools  so  they  can  be 
used  on  its  switches  and  wire¬ 
less  networking  gear. 

8  Siebel  customers  can  get  a 

good  price  for  the  vendor’s 
products  if  they  negotiate 
right,  users  say. 

10  Outsourcing  deals  are  hin¬ 
dered  by  new  challenges,  in¬ 
cluding  regulatory  require¬ 
ments  and  a  lack  of  managers. 

12  Global  Dispatches:  A  large 
bank  in  India  chooses  Linux 
for  its  branch  applications. 

12  Sarbanes-Oxley  compliance 
adds  costs  but  also  prepares 
companies  to  meet  future  fed¬ 
eral  regulations,  execs  say. 

14  Storage  Networking  World: 
iSCSI  and  data-protection 
technologies  will  get  a  lot  of 
attention  from  attendees  at 
this  week’s  event. 

16  Q&A:  New  Business  Objects 

CEO  John  Schwarz  explains 
his  move  from  Symantec. 


TECHNOLOGY 

27  Geek’s  Garden:  A  look  at 
online  bill  payment  trends, 
the  origins  of  random-access 
memory  and  a  virtual  mirror 
of  human  behavior  are  on  this 
week’s  tour. 

29  Hands  On:  Disk  Defrag¬ 
menters  Demystified.  Disk 
defragmentation  tools  offer  a 
trade-off  between  thorough¬ 
ness  and  speed.  Russell  Kay 
reviews  three  defragmenta¬ 
tion  utilities. 

34  Security  Manager’s  Journal: 
Bottom-Up  Infosec  Trumps 
Top-Down.  The  higher-ups 
ask  C.J.  Kelly  for  an  infosec 
plan  on  paper,  and  she  finds 
that  her  bottom-up  approach 
covers  more  of  the  bases  than 
this  top-down  effort. 

ONLINE 

WWW.COMPUTERWORLO.COM 

SNW  Coverage 

STORAGE:  See  complete  cov¬ 
erage  of  Storage  Networking 
World  Fall  this  week  from 
Orlando,  including  news  re¬ 
ports,  conference  blogs  and 
more,  www.computerworld. 
com/snwnow 

Unknown  Applications 

DISASTER  RECOVERY:  Just 
about  every  company  has 
“stealth  applications”  —  those 
that  have  been  installed  by 
end  users  without  the  knowl¬ 
edge  of  the  IT  department. 

So,  how  does  IT  live  with 
them?  Alan  Brill  of  Kroll 
Ontrack  has  a  few  ideas. 

©  QuickLink  57414 
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Shrinking  Degrees  of  Separation 

In  the  Technology  section:  In  an  interview, 
MacArthur  grant  winner  Jon  Kleinberg  answers 
questions  about  social  and  computer  networks 
and  how  emerging  search  technologies  will 
yield  more  information.  Page  36 


OPINIONS 

6  On  the  Mark:  Mark  Hall  re¬ 
ports  on  a  new  online  service 
that  lets  companies  get  by 
without  an  admin  assistant  by 
handling  travel  bookings  and 
other  basic  business  tasks. 

18  Don  Tennant  finds  it  unac¬ 
ceptable  that  female  IT  pro¬ 
fessionals  earn  90  cents  for 
every  dollar  their  male  coun¬ 
terparts  earn. 

18  Thornton  A.  May  blasts  three 
false  assumptions  about  IT. 

19  John  D.  Halamka  wonders 
why  he  can  use  his  ATM  card 
in  a  Japanese  post  office  but 
his  electronic  medical  records 
can’t  be  sent  across  the  street 
back  home  in  Boston. 


The  New  Normal? 

With  another  year  of  skimpy  3%  raises,  it  sure  looks 
that  way  for  the  more  than  14,000  IT  workers  who  took 
part  in  Computer- 
world's  19th  Annual 
Salary  Survey.  Now 
resigned  to  cost-of- 
living  increases,  most 
are  finding  consolation 
in  slightly  higher 
bonuses,  a  bit  less 
work  and  lower  stress. 

PAGE  41 


Opinion:  Unhappy  with  your  paycheck?  It’s 
really  about  respect,  not  more  money,  says  colum¬ 
nist  Paul  Glen.  PAGE  46 


Charts  and  Data  Points:  Find 

salary  information  for  30  IT  job  titles,  plus  data 
broken  out  by  region  and  company  size.  Also,  see 
how  we  conducted  this  year’s  survey.  PAGE  48 
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38  Robert  L.  Mitchell  knows 
users  will  whine  about  a 
stronger  security  stance  on 
the  devices  they  use,  but 
increased  liability  risks 
demand  it. 

64  Frankly  Speaking:  Frank 
Hayes  says  we  all  benefit 
when  the  free  market  comes 
into  play  as  it  has  in  Massa¬ 
chusetts,  where  the  state  has 
declared  that  OpenDocument 
will  be  its  official  format  for 
internal  documents  from  now 
on,  causing  Microsoft  to  start 
yowling. 
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Opinion  :  Innovation  helps  drive  salaries,  says 
columnist  Johanna  Rothman,  so  lookfor  ways  to  in¬ 
crease  your  technical  skills  and  your  ability  to  bring 
value  to  your  company.  PAGE  54 


Read  Rothman's  blog  this  week  at 
QuickLink  a7340. 


from  the  2005  surv.eyiji 
than  600  contractors^ 
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Interactive  Smart  Salary  Tool:  Comgarp 
your  pay  against  salary  data  from  more  than. 
14,000  IT  workers. 


or 

companies  win  always  fina  a  way  to  pay. 
talent,  says  executive.fecrulterTomBefjly: 
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Cisco  May  Build 
Products  in  India 

Cisco  Systems  Inc.  is  considering 
manufacturing  products  in  India, 
Cisco  President  and  CEO  John 
Chambers  told  reporters  in  Ban¬ 
galore  last  Friday.  The  networking 
vendor  won’t  invest  in  a  manufac¬ 
turing  plant,  but  it  may  hire  third 
parties  to  do  the  work.  Chambers 
also  said  that  Cisco  will  spend 
about  $50  million  on  a  facility  to 
house  its  Bangalore  R&D  unit. 


EMC  Says  Q3  Profit 
Nearly  Doubled . . . 

EMC  Corp.  reported  that  its  third- 
quarter  sales  rose  17%  from  the 
same  period  last  year  and  that  its 
quarterly  profit  nearly  doubled. 
The  storage  vendor  said  sales  of 
its  VMware  software  grew  67%, 
while  its  Clariion  and  Symmetrix 
array  business  slowed. 


. . .  And  Announces 
Plan  to  Buy  Captiva 

EMC  has  agreed  to  acquire  Capti¬ 
va  Software  Corp.,  a  maker  of 
software  for  digitally  capturing 
documents,  for  about  $275  mil¬ 
lion  in  cash.  EMC  already  inte¬ 
grates  Captiva’s  InputAccell 
software  with  its  Documentum 
content  management  system, 
and  it  plans  to  further  that  inte¬ 
gration  after  the  deal  is  complete. 
EMC  also  plans  to  continue  devel¬ 
opment  of  Captiva’s  stand-alone 
products. 

Qualcomm  Files  Suit 
Against  Broadcom 

Qualcomm  Inc.  has  filed  a  second 
lawsuit  in  its  patent  dispute  with 
Broadcom  Corp.  The  new  lawsuit 
charges  that  Broadcom  products 
infringe  on  Qualcomm  patents  for 
image-compression  technology 
and  video  encoding  and  decoding 
technology.  Both  companies  make 
chips  for  mobile  devices. 
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Nortel  Hires  CEO;  Users  Seek 
Sharper  Focus  on  Corporate  IT 


Vendor  needs  to 
rebuild  credibility, 
improve  marketing 


BY  MATT  HAMBLEN 

Nortel  Networks 
Corp.  last  week 
named  former  Mo¬ 
torola  Inc.  execu¬ 
tive  Mike  Zafirovski  president 
and  CEO,  a  move  that  sur¬ 
prised  some  customers  be¬ 
cause  it  came  19  months  after 
Nortel  board  member  Bill 
Owens  took  the  helm  of  the 
embattled  vendor  and  began  a 
series  of  internal  reforms. 

But  in  general,  more  than  20 
Nortel  users  interviewed  last 
week  said  they  look  at  Zafi- 
rovski’s  hiring  as  a  continua¬ 
tion  of  the  network  equipment 
vendor’s  efforts  to  rebuild  it¬ 
self  after  four  years  of  turmoil 
that  was  triggered  by  an  ac¬ 
counting  scandal. 

Re-establishing  credibility 
with  customers  will  be  critical 
as  Nortel  tries  to  capture  a 
larger  base  of  corporate  users, 
said  Steve  Ford,  president  of 
the  International  Nortel  Net¬ 
works  Users  Association  in 
Chicago.  With  more  than 
5,000  members,  the  INNUA  is 
Nortel’s  largest  user  group. 

When  Owens  spoke  at  the 
group’s  annual  conference  last 
summer,  he  told  attendees 
“that  Nortel  will  be  here  for  us 
in  the  long  term,”  said  Ford, 
who  is  coordinator  of  elec¬ 
tronic  services  at  Northeast¬ 
ern  State  University  in  Tahle- 
quah,  Okla.  He  added  that 
INNUA  officials  “trust  we  will 
see  that  same  dedication  to 
customers”  from  Zafirovski. 


Blocking  Maneuver 

The  management  change  is 
due  to  take  effect  Nov.  15.  How¬ 
ever,  two  days  after  Nortel  an¬ 
nounced  Zafirovski’s  appoint¬ 
ment,  Motorola  filed  a  lawsuit 
in  an  Illinois  court  attempting 
to  prevent  him  from  working 
at  Nortel  for  two  years.  Mo¬ 
torola  alleged  that  Zafirovski, 


who  was  its  presi¬ 
dent  and  chief  oper¬ 
ating  officer  until 
last  January,  violated 
a  noncompete  clause 
when  he  agreed  to 
join  Nortel. 

Brampton,  On¬ 
tario-based  Nortel 
said  in  a  statement 
that  it  would  review 
the  lawsuit  and  try 
to  discuss  the  matter 
with  Motorola  “with 
a  view  to  resolving  the 
dispute.” 

Zafirovski,  51,  said  during  a 
press  conference  that  he  plans 
to  emphasize  ethics  and  in¬ 
tegrity  at  Nortel  while  push¬ 
ing  to  attract  more  enterprise 
customers  and  increase  profit 
margins  from  the  low  single 
digits  to  between  13%  and  19% 
of  revenue  (see  story  below). 

Users  like  Ford  applauded 
Zafirovski’s  plan  to  pay  more 
attention  to  corporate  ac¬ 
counts,  as  opposed  to  tele¬ 
communications  vendors. 

He  said  an  internal  realign¬ 


ment  that  Nortel  an¬ 
nounced  last  month 
also  should  help 
sharpen  the  vendor’s 
corporate  focus.  For 
example,  he  noted 
that  Nortel  plans  to 
build  support  sys¬ 
tems  for  customers 
that  will  be  aligned 
with  the  INNUA’s  re¬ 
gional  chapters. 

Michael  Hazdra, 
a  telecommunica¬ 
tions  manager  at  Benedictine 
University  in  Lisle,  Ill.,  said  he 
was  surprised  that  Owens  — 
who  was  vice  chairman  of 
Nortel’s  board  before  taking 
the  CEO  job  —  is  stepping 
down  so  soon. 

On  the  other  hand,  John 
Haltom,  network  director 
at  Erlanger  Health  System 
in  Chattanooga,  Tenn.,  said 
he  had  been  told  by  Nortel 
that  the  65-year-old  Owens 
“was  filling  a  gap  and  never 
really  intended  to  stay  for  the 
long  haul.” 

Like  some  other  users,  Hal¬ 


tom  called  on  Zafirovski  to 
market  Nortel’s  products  bet¬ 
ter.  But  he  added  that  Nortel 
has  been  “chastised  enough,  in 
my  opinion,”  for  all  of  its 
problems.  “I  think  they’re  still 
a  very  financially  viable  com¬ 
pany,  and  we’ll  keep  our  in¬ 
vestments  moving  in  their  di¬ 
rection,”  Haltom  said. 

Robert  Whiteley,  an  analyst 
at  Forrester  Research  Inc.,  said 
Zafirovski  is  becoming  CEO  at 
an  important  juncture.  Nortel 
“hasn’t  maintained  a  strong  fo¬ 
cus,  hasn’t  marketed  much 
and  had  a  temporary  modus 
operandi  with  Owens  at  the 
helm,”  said  Whiteley.  Selling 
products  to  network  services 
providers  offers  only  moder¬ 
ate  growth  potential  for  the 
company  because  the  market 
is  so  competitive,  he  said. 

He  added  that  the  enter¬ 
prise  market  has  higher 
growth  potential  and  that  both 
Nortel  and  Hewlett-Packard 
Co.’s  ProCurve  unit  have 
chances  to  be  an  Avis  to  Cisco 
Systems  Inc.’s  Hertz.  ©  57715 


ZAFIROVSKI  said  he 
aims  to  increase 
Nortel’s  profit  mar¬ 
gins  to  13%  to 
19%  of  revenue. 


New  Exec  Looks  Beyond  Telecom  Market 


Mike  Zafirovski,  who  is  sched¬ 
uled  to  take  over  as  Nortel’s 
president  and  CEO  next  month, 
discussed  some  of  his  plans  for 
the  company  during  a  press  con¬ 
ference  last  week.  Among  other 
things,  he  vowed  that  Nortel  will 
hew  to  a  firm  ethics  policy.  Ex¬ 
cerpts  from  his  comments  follow. 

On  business  ethics:  “It's  one 
strike  and  you're  out  when  it 
comes  to  ethics  and  integrity.  I 
love  to  win  and  compete ...  but 
not  by  using  illegal  substances, 
to  use  an  analogy  from  sports.  I 
believe  in  following  the  letter  and 
spirit  of  the  law.” 

On  pushing  Nortel  more  to¬ 
ward  the  enterprise  market: 


It’s  one 
strike  and 
you’re  out  when  it 
comes  to  ethics 
and  integrity. 

"Most  people  still  think  of  Nortel 
as  a  telecom  [equipment  pro¬ 
vider],  and  certainly  that’s  an 
important  part  of  our  business. 
But  we  should  be  expanding  our 
views  [of]  and  our  potential  [with 
corporate  users].” 

On  Nortel’s  future:  “I’m  not 
at  ail  confused  about  the  chal¬ 
lenges  facing  us,  and  the  fidu¬ 
ciary  responsibilities.  [But]  I 
play  to  win.  I’m  convinced  that 


Nortel  will  be  a  big  winner 
again.” 

On  his  immediate  priorities: 

“First,  to  continue  Nortel’s  finan¬ 
cial  transformation.  Second,  to 
come  up  with  a  clear  and  strate¬ 
gic  focus.  In  a  company  with 
less  than  $11  billion  in  revenue,  I 
need  to  get  a  sense  of  priorities 
and  paybacks.  Third,  profitability. 
We’ve  worked  too  hard  to  have 
the  operating  margin  in  the  low 
to  middle  single  digits.  Fourth, 
innovation  and  the  R&D  effect,  i 
love  engineering  and  want  to 
see  how  to  apply  it  to  consumer 
and  enterprise  uses  and  make 
sure  we  have  the  right  processes 
in  place." 

-Matt  Hamblen 
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Cisco  Builds  System  to  Boost 
Emergency  Communications 


Workers’  devices 
made  interoperable 
by  IP  technology7 

BY  MATT  HAMBLEN 

Cisco  Systems  Inc.  today  will 
announce  plans  for  a  commu¬ 
nications  system  designed  to 
allow  walkie-talkies  and  other 
devices  used  by  emergency 
personnel  to  interoperate  via 
the  Internet  Protocol  and  Ses¬ 
sion  Initiation  Protocol. 

The  technology  attempts  to 
address  a  problem  that  many 
public  officials  believe  has 
reached  crisis  proportions.  For 
example,  after  hurricanes  Kat¬ 
rina  and  Rita  struck  the  Gulf 
Coast,  state  and  local  police 
were  unable  to  communicate 
with  each  other  because  their 
systems  weren’t  interoperable, 


Audwin  Samuel,  mayor  pro 
tern  of  Beaumont,  Texas,  said 
in  testimony  last  week  before 
the  U.S.  House  Committee  on 
Homeland  Security. 

“Communications  interop¬ 
erability  has  always  been  a 
concern  with  first  responders, 
going  back  to  the  first  radios,” 
said  Michael  Griffin,  assistant 
chief  of  law  enforcement  for 
California’s  Office  of  Emer¬ 
gency  Services.  “There’s  a 
growing  realization  from  pub¬ 
lic  safety  experts  that  we  need 
to  look  at  new  technologies.” 

Cisco’s  new  offering,  called 
the  IP  Interoperability  and 
Collaboration  System  (IPICS), 
will  be  rolled  out  globally  over 
the  next  six  to  12  months,  ac¬ 
cording  to  Shah  Talukder,  gen¬ 
eral  manager  of  the  network¬ 
ing  vendor’s  safety  and  securi- 


TECHNOLOGY  DETAILS 


IPICS 

KEY  COMPONENTS: 

■  Server  hardware  and  software 
that  manages  devices  and  the 
conversion  of  network  traffic 
from  other  protocols  to  IP. 

■  An  application  that  manages 
push-to-talk  communications 
services. 

■  Aset  ofXML-based 
voice-over-IP  services. 


ty  systems  business  unit. 

With  10  to  15  years  of  life 
left  in  expensive  handheld  ra¬ 
dios  that  use  proprietary  net¬ 
works,  Cisco  decided  to  take 
the  legacy  infrastructure  “and 
tie  it  all  to  IP,  and  from  there 
to  other  modalities,”  Talukder 


said.  He  added  that  IPICS  can 
be  used  to  connect  push-to- 
talk  radios  to  each  other  and 
to  analog,  cellular  and  IP 
phones,  handhelds  and  laptop 
PCs  with  Wi-Fi  links. 

Cisco  plans  to  demonstrate 
the  technology  at  a  press  con¬ 
ference  in  New  York,  and  the 
company  said  it  has  several 
trial  projects  under  way  in 
both  the  public  and  private 
sectors.  Pricing  has  yet  to  be 
finalized,  said  Talukder. 

Potential  private-sector  uses 
include  transportation  and 
manufacturing  applications  in 
which  independent  drivers  or 
contractors  use  different  radio 
networks  but  need  to  be  able 
to  communicate,  he  said. 

“This  is  unique  technology, 
and  it  solves  a  glaring  problem 
with  first  responders  and  fed¬ 
eral  agencies  and  the  military,” 
said  Bradley  Curran,  an  ana¬ 
lyst  at  Frost  &  Sullivan  Ltd.  in 
New  York. 

Curran  has  seen  IPICS 
demonstrated  for  voice  appli¬ 
cations  but  said  the  technolo¬ 
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gy’s  true  value  will  be  realized 
as  Cisco  adds  more  features, 
such  as  support  for  linking 
GPS  information  with  other 
data  and  even  video  feeds. 
That  functionality  could,  for 
example,  give  disease-control 
experts  located  far  from  the 
scene  of  a  biological  attack  the 
ability  to  communicate  with 
local  officials  via  their  laptops 
and  perhaps  share  medical 
drawings  and  pictures,  he  said. 

Griffin  agreed  that  more  is 
needed  than  just  support  for 
voice  communications  be¬ 
tween  devices.  “Major  events 
require  not  just  voice  interop¬ 
erability  but  integrated  map¬ 
ping,  data  and  video,”  he  said, 
noting  that  firefighters  need 
architectural  drawings  of 
buildings  that  are  on  fire. 

Other  efforts  to  provide 
emergency  communications 
interoperability  are  in  prog¬ 
ress  at  the  state  and  local  lev¬ 
els,  and  the  U.S.  Department 
of  Justice’s  CommTech  pro¬ 
gram  provides  grants  for  tech¬ 
nical  research.  ©  57746 


BI-GIS  Systems  Support  Disaster  Relief  Efforts 


Fraud-detection 
app  put  to  new 
use  after  Katrina 

BY  HEATHER  HAVENSTEIN 

Two  weeks  before  Hurricane 
Katrina  slammed  into  the  Gulf 
Coast,  Mississippi’s  Depart¬ 
ment  of  Human  Services  was 
wrapping  up  training  classes 
for  an  application  that  prom¬ 
ised  to  detect  food  stamp  fraud. 

Once  the  hurricane  hit,  state 
officials  moved  quickly  to  use 
the  software,  which  marries 
business  intelligence  tools  and 
geographic  information  sys¬ 
tems  (GIS)  software,  to  help 
ensure  that  aid  monies  weren’t 
wasted  or  stolen  in  the  15 
coastal  counties  targeted  for 
additional  food  stamp  benefits. 

Mississippi  officials  last 
week  said  that  they  plan  to 
make  the  location-based  BI 
application  available  to  all 
state  agencies  so  it  can  be 
adapted  for  a  variety  of  uses, 
such  as  tracking  foster  chil¬ 
dren  and  Medicaid  recipients. 


Bud  Douglas,  chief  systems 
officer  in  Mississippi’s  Depart¬ 
ment  of  Human  Services,  said 
the  application  uses  Web- 
Focus  reporting  tools  from 
Information  Builders  Inc., 
adapters  from  IBI’s  iWay  Soft¬ 
ware  unit,  and  GIS  tools  from 
Environmental  Systems  Re¬ 
search  Institute  Inc.  (ESRI)  to 
display  BI  data  in  maps. 

The  interface  for  the  system 
was  created  by  developers  in 
the  state  of  Louisiana’s  IT  op¬ 
eration,  which  also  uses  the 
application. 

Additional  Uses 

For  the  original  application, 
the  WebFocus  tool  is  used  to 
generate  reports  detailing 
what  recipients  are  buying 
with  food  stamps.  The  GIS 
maps  can  pinpoint  the  loca¬ 
tions  of  1.2  million  daily  food 
stamp  transactions  and  high¬ 
light  suspicious  behavior, 
Douglas  said. 

Next,  the  state  hopes  to 
build  a  GIS  map  for  all  state 
agencies  to  map  the  resi¬ 


dences  of  all  potential  clients, 
Douglas  noted.  For  example, 
the  application  would  map  the 
locations  of  the  state’s  elderly 
and  special  needs  populations 
to  help  in  evacuation  planning 
for  a  future  disaster,  he  said. 

But  first,  funding  is  required 
to  create  geocodes,  which 
identify  the  longitude  and  lati¬ 
tude  of  physical  locations. 

Mississippi’s  state  govern¬ 


ment  is  but  one  operation  us¬ 
ing  a  combination  of  BI  and 
GIS  tools  for  hurricane  plan¬ 
ning  and  recovery  efforts. 

The  American  Red  Cross 
used  such  tools  to  prepare  for 
Hurricane  Wilma,  projected  to 
hit  Florida  over  the  weekend. 

During  and  after  hurricanes 
Katrina  and  Rita,  the  Red  Cross 
relied  heavily  on  location- 
based  BI  for  purposes  such  as 


deciding  where  to  send  relief 
supplies  and  set  up  service 
centers,  said  Greg  Tune,  lead 
program  manager  for  disaster 
assessment  and  GIS  at  the  Red 
Cross  in  Washington. 

The  relief  organization  uses 
Web-based  query  and  report¬ 
ing  tools  from  Business  Ob¬ 
jects  SA  to  extract  data  from 
its  data  warehouse  and  GIS 
tools  from  ESRI  to  generate 
maps  based  on  that  data,  he 
explained. 

The  use  of  location-based 
BI  should  grow,  said  Wayne 
Eckerson,  director  of  research 
at  The  Data  Warehousing  In¬ 
stitute  in  Seattle.  People  will 
increasingly  turn  to  technolo¬ 
gy  that  geographically  dis¬ 
plays  data  not  only  for  relief 
efforts  but  also  for  commer¬ 
cial  purposes,  such  as  identi¬ 
fying  potential  customers  or 
breaking  down  sales  by  re¬ 
gion,  he  said.  ©  57742 


ME  ONLINE 

A  team  of  volunteers  led  by  a  Delta  State 
University  professor  used  GIS  technology  to 
predict  storm  damage  and  track  victims: 

QuickLink  57743 
wwwxeinfJiiterwGdd.com 


THE  RED  CROSS  teed  software  from  ESRI  and  Business  Objects  to 
create  this  map  of  shelters  set  up  after  Hurricane  Katrina. 
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Unisys  Posts  Loss, 
Cuts  3,600  Jobs 


Slue  Bell,  Pa.-based  Unisys  Corp. 
said  it  will  cut  3,600  jobs  and  di¬ 
vest  parts  of  its  business  over  the 
next  year,  after  reporting  a  pre¬ 
liminary  third-quarter  net  loss  of 
$54.3  million,  or  16  cents  per 
share.  The  company  declined  to 
reveal  its  divestiture  plans  but  did 
say  it  will  now  focus  its  efforts  on 
outsourcing,  open-source  and 
Linux,  Microsoft  products,  and 
security  products. 


SAP  Revenue  Gains 
Boost  Q3  Forecast 

Strong  third-quarter  license  rev¬ 
enue  prompted  SAP  AG  to  raise 
its  full-year  forecast.  SAP  now 
expects  12%  to  14%  license  sales 
growth  versus  its  earlier  projec¬ 
tion  of  10%  to  12%. 


SAP  BY  THE  NUMBERS 


REVENUE 


Q3’05 

S2.4B 

S400M 

Q3’04 

S2.1B 

S348M 

Motorola,  Palm  to 
Promote  Linux 

Schaumburg,  lll.-based  Motorola 
Inc.  and  Sunnyvale,  Calif.-based 
PalmSource  Inc.  are  among  the 
companies  lined  up  behind  a  new 
initiative  to  promote  the  use  of 
Linux  on  cell  phones.  The  Mobile 
Linux  Initiative  was  launched  by 
Open  Source  Development  Labs 
Inc.  to  tackle  technical  challenges 
and  support  Linux  on  handheld 
devices. 

Anteon  Pays  S31.5M 
For  Milestone  Group 

IT  services  firm  Anteon  Interna¬ 
tional  Corp.  has  acquired  Mile¬ 
stone  Group  LLC,  a  provider  of 
ST  professional  services  and  solu¬ 
tions  to  U.S.  government  clients. 
With  the  deal,  valued  at  $31.5 
million,  Fairfax,  Va.- based  Anteon 
gains  Arlington,  Va.-based  Mile¬ 
stone  Group’s  enterprise  architec¬ 
ture  and  systems,  information  as¬ 
surance,  and  program  and  finan¬ 
cial  management  practices. 


HOT  TECHNOLOGY  TRENDS,  NEW  PRODUCT 
NEWS  AND  INDUSTRY  BUZZ  BY  MARK  HALL 


L  ON  THE  MARK 


Online  Personal 
Assistant  Does . . . 


. . .  almost  everything,  except  fetch  coffee  or  fix  paper  jams 
in  the  copier.  According  to  Patrick  Grady,  CEO  of 
Rearden  Commerce  Corp.  in  San  Mateo,  Calif.,  the 
Web-based  Rearden  Employee  Business  service  can 
book  travel  plans  for  workers  and  apply  corporate 


policies  and 
rates  with 
approved 
business 
partners,  as 
well  as  indi¬ 
vidual  per¬ 
sonal  prefer¬ 
ences.  Grady 
says  that  be¬ 
cause  the  on¬ 
line  service 
integrates  with  Notes,  Out¬ 
look  “and  any  groupware,”  it 
can  arrange  business  meet¬ 
ings  and  make  appointments 
in  participants’  calendars. 
(Even  ardent  Mac  users  will 
get  iCal  integration  in  the 
coming  year.)  The  service  al¬ 
ways  knows  where  you  are, 
Grady  says,  so  it  knows 
whether  to  book  your  next 
business  meal  in  Chicago  or 
Shanghai.  And  because  it 
knows  your  rank  inside  the 
company,  it’ll  know  whether 
your  expense  account  toler¬ 
ates  meals  served  at  establish¬ 
ments  boasting  three  Miche- 
lin  stars  or  sports  bars  featur¬ 
ing  burgers  and  beer.  In  Q1  of 
next  year,  Rearden  will  start 


booking  tickets  to  concerts 
and  other  events  and  open  its 
application  programming  in¬ 
terfaces  so  the  service  can  be 
linked  to  other  applications 
and  online  services,  Grady 
says.  These  days,  workers  are 
often  left  to  fend  for  them¬ 
selves  on  basic  business 
tasks,  he  says,  claiming  that 
his  service  can  be  as  good 
as  a  top-notch  administrative 
assistant. 

Free  source-code 
service  means . . . 

...  No  Excuses  -  literally.  Dou¬ 
glas  Levin  thinks  CIOs  have 
been  reluctant  to  check 
whether  their  internally  devel¬ 
oped  applications  are  rife  with 
open-source  code  and  thus 
potentially 
fraught 
with  viola¬ 
tions  of 
open- 
source  li¬ 
censes.  So 
the  CEO  of 
Black  Duck 
Software 
Inc.  in 


Waltham,  Mass.,  is  giving 
away  his  source-code  evalua¬ 
tion  service  until  year’s  end 
(and  maybe  even  after  that, 
Levin  hints).  You  can  arrange 
to  have  as  much  as  25MB  of 
your  source  code  evaluated 
for  nothing.  Nada.  Zip.  Yes, 
free.  Previously,  Black  Duck 
charged  up  to  $25,000  for  the 
analysis,  which  takes  a  couple 
of  days.  Now,  argues  Levin, 
“companies  have  no  excuses 
not  to  fmd  out  what’s  in  their 
code.”  Hence  the  service’s 
name:  No  Excuses. 

Development  tool 
lets  end  users  create . . . 

. . .  Web  front-end  apps  to  cor¬ 
porate  databases.  Alpha  Five 
Version  7,  which  ships  this 
week,  “lets  you  build  pretty 
sophisticated  Web  database 
applications  with  little  or  no 
programming  experience,” 
promises  Richard  Rabins,  co- 
chairman  of  Alpha  Software 
Inc.  in  Burlington,  Mass.  End 
users  can  point  and  click  their 
way  through  the  creation  of  a 
user  interface,  link  to  back¬ 
end  databases  and  even  de¬ 
fine  security  and  data  access 
rights  down  to  the  field  level 
of  their  front-end  apps.  Ra¬ 
bins  says  Version  7  eliminates 
the  need  to  program  with 
PHP,  Perl  or  other  scripting 
tools.  The  Alpha  Five  applica¬ 
tion-build  tool  costs  $349  for  a 
single  desktop  PC.  The  run¬ 
time  server  software  costs 
$649  and  comes  with  an  un¬ 
limited  user  license. 

Data  archiving  tool 
can  pause . . . 

...  the  process,  then  resume 
operations.  That’s  only  one 
of  about  300  new  features  in 
OuterBay  5.0’s  two  editions, 
says  Michael  Howard,  CEO  of 
OuterBay  Technologies  Inc.  in 
Cupertino,  Calif.  He  says  the 
pause-and-resume  feature  in 
OuterBay  5.0  Enterprise  Edi¬ 
tion  allows  system  resources 
being  used  during  archiving 
to  be  diverted  to  other  tasks 
when  necessary  without  hav¬ 


ing  to  start  the  archiving  from 
scratch  once  those  resources 
are  freed  up  again.  In  addition, 
archiving  performance  has 
doubled  due 
to  improved 
bulk-loading 
techniques, 
Howard 
claims.  As 
part  of  its 
Compliance 
Edition, 
which  sup¬ 
ports  long¬ 
term  data  re¬ 
tention,  OuterBay  has  added 
adapters  for  WORM  (write- 
once,  read-many)  optical  de¬ 
vices  from  the  major  storage 
manufacturers.  OuterBay  5.0 
ships  on  Nov.  15.  Pricing 
wasn’t  disclosed. 

Protect  your  field 
techs  from . . . 

. . .  harsh  weather  and  other 
hazards.  Joel  Bomgaars,  CEO 
of  Network$treaming  Inc.  in 
Ridgeland,  Miss.,  says  he  was 
burned  out,  so  to  speak,  from 
having  to  “spend  a  lot  of  time 
on  the  road  in  the  Mississippi 
heat”  traveling  to  user  sites  to 
troubleshoot  systems.  So  he 
developed  his  SupportDesk 
appliance  and  software.  The 
device  sits  in  your  data  cen¬ 
ter,  where  end  users  access  it 
via  a  help  desk  icon  or  a  URL. 
Once  they  reach  Support- 
Desk,  troubled  users  click  on 
a  link  to  an  available  help 
desk  technician.  End  users 
give  techs  explicit  permission 
to  take  control  of  their  PCs 
but  can  always  regain  control 
by  moving  their  mouse,  or 
they  can  use  the  mouse  to 
show  how  the  problem  mani¬ 
fests  itself.  SupportDesk 
works  with  PCs  running  Win¬ 
dows  95  and  beyond.  Pricing 
starts  at  $3,200.  ©  57700 
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Cisco  Adds  Switch  Support 
To  Endpoint  Security  Tools 

Expands  NAC  products  beyond  routers, 
but  users  may  face  hardware  upgrades 


BY  JAIKUMAR  ViJAYAN 

N  UPGRADE  Of  Cisco 
Systems  Inc.’s  Net¬ 
work  Admission 
Control  (NAC)  tech¬ 
nologies,  announced  last  week, 
adds  wider  hardware  support 
and  several  features  designed 
to  help  companies  better  pro¬ 
tect  their  networks  against  in¬ 
secure  endpoint  devices. 

But  network  managers  and 
analysts  said  the  fact  that  the 
NAC  offering  is  supported 
only  on  relatively  new  net¬ 
working  equipment  from  Cis¬ 
co  is  likely  to  limit  its  appeal. 

“I  think  they’re  moving  in 
the  right  direction,”  said  Jim 
Kirby,  a  network  engineer  at 
Wells’  Dairy  Inc.  in  Le  Mars, 
Iowa.  But  adopting  NAC  any¬ 
time  soon  would  be  a  chal¬ 


lenge  because  of  the  upgrades 
that  the  ice  cream  processor 
would  have  to  make  to  its  net¬ 
work  infrastructure,  he  said. 

As  part  of  the  NAC  initia¬ 
tive,  Cisco  is  selling  a  line  of 
tools  that  can  permit,  restrict 
or  deny  admission  to  corpo¬ 
rate  networks  based  on  the  se¬ 
curity  status  of  end-user  sys¬ 
tems.  The  products  include 
agent  software  for  collecting 
security  data  from  client  sys¬ 
tems,  network  appliances  that 
enforce  security  rules  and  a 
policy  management  server. 

Until  now,  the  technology 
has  been  available  only  on  Cis¬ 
co’s  routers.  But  the  company 
said  it  plans  to  add  support  for 
NAC  to  its  Catalyst  switches 
by  the  end  of  next  month.  And 
as  of  last  week,  the  products 


could  be  used  with  Cisco’s 
wireless  networking  devices. 

Cisco  is  also  making  it  pos¬ 
sible  for  companies  to  enforce 
security  policies  on  systems 
they  don’t  own,  such  as  PCs 
belonging  to  contractors  and 
business  partners.  Cisco  is  de¬ 
livering  the  agentless  capabili¬ 
ty  in  conjunction  with  securi¬ 
ty  vendors  Altiris  Inc.,  Qualys 
Inc.  and  Symantec  Corp. 

Extending  Its  Reach 

Bob  Gleichauf,  chief  technol¬ 
ogy  officer  for  Cisco’s  Security 
Technology  Group,  said  that 
more  than  60  other  vendors 
are  now  participating  in  the 
NAC  program,  up  from  the 
three  partners  Cisco  had  when 
it  shipped  an  initial  set  of 
products  in  June  2004. 

The  fact  that  Cisco  has  fi¬ 
nally  extended  NAC  support 
to  its  switches  should  make 
the  technology  more  interest¬ 


ing  to  IT  managers,  said  Joel 
Conover,  an  analyst  at  Current 
Analysis  Inc.  in  Sterling,  Va. 

“The  closer  to  the  PC  or  the 
endpoint  that  you  can  provide 
enforcement,  the  less  chance 
that  some  malicious  software 
that  is  on  one  PC  can  spread 
to  others,”  he  said. 

Even  so,  the  availability  of 
NAC  on  only  Cisco’s  equip¬ 
ment  could  be  of  some  con¬ 
cern  to  users  who  don’t  want 
to  get  locked  into  a  propri¬ 
etary  technology,  Conover 
noted.  He  added  that  the  cost 
of  upgrading  to  new  routers 
and  switches  is  another  poten¬ 
tial  roadblock  for  users. 

Those  are  some  of  the  rea¬ 
sons  why  Tripos  Inc.  won’t  be 
able  to  adopt  NAC  in  the  fore¬ 
seeable  future,  said  Jerry  Win- 
trode,  a  senior  network  archi¬ 
tect  at  the  St.  Louis-based 
drug  research  company. 

Tripos  uses  software  from 
InfoExpress  Inc.  in  Mountain 
View,  Calif.,  to  enforce  securi¬ 
ty  policies  on  the  systems  of 
remote  employees.  The  com¬ 
pany  has  developed  a  home¬ 
grown  tool  for  detecting  and 


NEW  PRODUCTS 

Cisco  also  had  other 
NAC  announcements: 

~  An  upgraded  N  4C  anpliann 

that  includes  a  new  bundled 
hardware  option  and  precon 
figured  antispyware  checks. 
Prices  start  at  $8,995. 


flccess  Do  irvet  The 

Trust  Agent  upgrade  is  free: 
ACS  starts  at  S7.995. 


preventing  unauthorized  PCs 
from  connecting  to  its  LAN. 

Both  capabilities  are  avail¬ 
able  as  part  of  NAC.  But  up¬ 
grading  the  switches  and  net¬ 
work  management  software 
Tripos  now  uses  would  cost 
$160,000  to  $170,000.  Upgrad¬ 
ing  the  InfoExpress  suite  so  it 
could  replace  Tripos’  home¬ 
grown  tool,  on  the  other  hand, 
would  cost  less,  at  $60,000, 
said  Wintrode.  ©  57739 


MORE  ON  THIS  TOPIC 

The  cost  of  doing  nothing  to  secure  network 
endpoints  is  getting  higher  and  higher,  says 
Robert  L.  Mitchell.  Page  38 


Users  Offer  Tips  for  Negotiating  With  Siebel 


For  better  prices, 
spell  out  goals, 
buy  in  volume 

BY  MARC  L.  SONGINI 

BOSTON 

As  the  market  leader  for  CRM 
software,  Siebel  Systems  Inc. 
has  a  reputation  as  a  tough  ne¬ 
gotiator  on  price. 

But  several  attendees  at 
Siebel’s  CustomerWorld  user 
event  here  last  week  said  it’s 
possible  to  pay  reasonable 
prices  for  its  software  —  and 
offered  tips  on  how  to  do  it. 

“Pricing  was  an  obstacle,” 
said  Robert  Martens,  director 
of  global  front-office  technol¬ 
ogy  at  Ingersoll-Rand  Co., 
during  a  customer  forum  at 
file  conference.  “Initially,  it 
was  sticker  shock,”  he  said  of 
the  company’s  negotiations 
with  Siebel.  “The  published 
price  is  pretty  high.” 

With  that  in  mind,  Ingersoll- 
Rand  initiated  a  series  of  dia- 


CustomerWorld  Product 
Announcements 

Siebel  Component  Assembly: 

Provides  software  building  blocks 
for  creating  CRM  workflows. 

Business  Analytics  7.8:  Adds 
usability  functionality  and  new 
visualization  and  charting  tools. 

Siebel  Real-Time  Decisions: 

Uses  predictive  analytics  to  help 
guide  end  users. 


logues  with  Siebel,  he  said.  “It 
took  some  time  for  us  to  get 
them  familiar  with  our  busi¬ 
ness  model,”  Martens  said. 
“Once  they  understood  our 
direction  and  purpose,  it  was 
easy.” 

A  plus  for  Ingersoll-Rand  is 
that  it  deploys  both  hosted  and 
in-house  Siebel  pricing,  con¬ 
figuration  and  call  center  soft¬ 
ware.  That  allows  divisions 
that  can’t  justify  an  expensive 
rollout  to  experiment  with  the 
hosted  version  of  Siebel’s  soft¬ 


ware,  Siebel  OnDemand, 
“without  the  CFO  crashing 
down  on  them,”  said  Martens. 

Historically,  Siebel  has  had 
a  take-no-prisoners  attitude 
toward  price  negotiations,  said 
Joshua  Greenbaum,  an  analyst 
at  Enterprise  Applications 
Consulting  in  Berkeley,  Calif. 
“If  you  wanted  the  best  CRM, 
you  had  to  pay  for  it.” 

At  Pitney  Bowes  Inc.,  Siebel 
licenses  are  purchased  at  the 
corporate  level,  said  William 
Geronimo,  director  of  applica¬ 
tions  development  for  CRM 
information  systems.  The 
Stamford,  Conn.-based  mail¬ 
sorting  systems  provider  runs 
Siebel’s  customer  service,  call 
center  and  sales  force  automa¬ 
tion  software. 

When  Pitney  Bowes  started 
rolling  out  Siebel  applications 
five  years  ago,  officials  saved 
thousands  of  dollars  by  pur¬ 
chasing  in  volume  and  spread¬ 
ing  the  software  throughout 
the  enterprise,  Geronimo  said. 


A  business  unit  that  wants 
access  to  the  applications  is 
responsible  for  buying  its  own 
hardware  and  consultancy  ser¬ 
vices  and  paying  its  own  infra¬ 
structure  costs,  he  said. 

Pitney  Bowes  also  avoided 
buying  too  many  licenses, 
Geronimo  said.  “We  had  a 
good  projection  of  what  we 
needed  and  hit  it  about  right,” 
he  noted. 

Electronic  Data  Systems 
Corp.  found  Siebel  to  be  flexi¬ 
ble  during  price  negotiations, 
according  to  J.R.  Jesson,  chief 
technology  officer  for  the 
applications  and  industry 
frameworks  portfolio  at  the 
integrator.  EDS  uses  several 
Siebel  applications,  including 
Customer  Order  Management 
and  Business  Analytics. 

In  its  negotiations  with 
Siebel,  EDS  used  a  “creative 
dialogue,”  laying  out  both  its 
long-  and  short-term  objec¬ 
tives,  Jesson  said.  “EDS  set  the 
tone  that  we  didn’t  want  a 
[single]  sales  event,  but  rather 
an  ongoing,  long-term  rela¬ 
tionship,”  Jesson  said.  “This 


has  borne  fruit  beyond  the 
deal.  We  are  working  closely 
with  Siebel  at  both  the  mar¬ 
keting  and  technical  levels.” 

A  Siebel  spokesman  sug¬ 
gested  that  customers  first 
consider  the  value  provided 
by  applications  rather  than 
simply  price.  There  are  multi¬ 
ple  elements  involved  in  buy¬ 
ing  software,  and  the  license 
fee  is  just  one  of  them,  he  said. 

Siebel’s  recently  introduced 
Version  7.7  of  its  applications 
cuts  down  on  the  total  cost  of 
ownership,  the  spokesman 
said.  And  some  users  might 
find  Siebel  OnDemand  more 
convenient  and  flexible  in 
terms  of  pricing,  he  said. 

“We’re  not  shoving  a 
deployment  model  down 
someone’s  throat,”  he  added. 
©57738 


LOOKING  AHEAD 

Siebel  exec  Bruce  Cleveland  talks  about 
the  company’s  past  -  and  its  future  as 
part  of  Oracle:  Quicklink  57709 


Users  at  the  CustomerWorld  event  were 
upbeat  about  Oracle's  acquisition  of  Siebel: 


©Quicklink  57734 
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MORE  BUSINESS 
CONFIDENCE. 


With  ProCurve  Networking  by  HP,  you  choose  from  a  comprehensive  set  of  security  solutions  — 
each  designed  to  help  protect  your  growing  company.  You  get  exclusive  products  like  ProCurve 
Secure  Router,  Virus  Throttle,  Identity  Driven  Management  and  Access  Controller  Module. 

And  unlike  most  other  providers,  ProCurve  ensures  critical  network  security  at  the  edge  where 
users  connect  as  well  as  at  the  vulnerable  core.  Edge-to-edge  security  means  less  downtime, 
more  uptime.  ProCurve  means  more  security,  more  affordably. 


Find  out  more  about  ProCurve  Networking.  Call  800-975-7684  Ref  Code  53  or 
download  informative  reports  complete  with  case  studies  and  cost-of-ownership 
analysis  at  www.hp.com/learn/procurve3. 


ProCurve  Networking 

HP  Innovation 
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Securing  the  network  at 
the  edge  keeps  business 
out  of  harm's  way 

who  posed  the  “show- 
stopper”  question  at  a  recent  executive  committee  meeting: 
“With  all  the  resources  and  attention  businesses  are  expending 
on  security,  why  are  we  still  besieged  with  continuous  threats 
from  viruses,  worms,  and  hackers?” 

He  wasn’t  overstating  the  problem.  Today  an  estimated 
100,000  viruses,  worms,  and  Trojan  horses  pose  direct  threats 
to  network  computer  users.  The  cost  of  system  downtime 
stemming  from  attacks  can  often  be  measured  in  thousands 
of  dollars  per  minute,  and  the  theft  of  sensitive  data  carries 
tremendous  potential  liability.  So  it’s  no  wonder  security 
remains  a  top  priority  for  business  and  technology  managers 
alike. 

The  truth  is  that  current  methods  and  strategies  for  secur¬ 
ing  corporate  networks  often  fall  short.  Many  companies  use 
virus  signature  scanning  techniques,  but  these  technologies 
alone  are  not  sufficient  since  they  do  not  detect  new  forms  of 
viruses  and  they  depend  on  human  response.  Once  in  the  net¬ 
work,  a  virus  propagates  at  machine  speed,  which  is  orders  of 
magnitude  faster  than  the  “human-speed"  responses  to  them. 

WHAT  USERS  WANT 

Clearly,  businesses  need  a  complete  solution  that  truly  delivers 
security  without  compromise  to  protect  networks  and  the  mission- 
critical  data  that  runs  over  them.  A  checklist  of  the  features  of 
such  a  solution  should  include: 

/  Simplicity  for  administrators  and  transparency  for  users 
/  Ease  of  deployment  and  flexibility 
/  Security  built-in  and  integrated  with  the  hardware, 
not  bolted  on 

/  Security  at  the  critical  network  edge  where  users  connect 

This  is  exactly  what  users  get,  and  a  lot  more,  with 
Hewlett-Packard’s  ProCurve  Networking  solutions,  engineered  to 
move  vital  network  access  decisions  to  the  network  edge  while 
freeing  essential  network  resources  to  enable  the  high-band- 
width  connections  they  are  supposed  to  provide.  By  concentrat- 


It  was  the  CFO 


ProCurve  Networking 


HP  Innovation 


ing  security  at  the  edge,  HP  ProCurve  further  enables  support 
for  vita!  network  convergence  and  burgeoning  mobile  strategies. 
The  result  is  a  solution  without  tradeoffs  between  ease  of  use 
and  performance  versus  capability.  ProCurve  Networking  offers 
security  without  compromise. 

A  key  and  unique  element  of  the  ProCurve  solution  is  virus¬ 
throttling  functionality  built  directly  into  ProCurve  switches.  This 
highly  effective  bulwark  against  viruses  provides  detection  at 
the  network  edge  based  on  traffic  behavior,  not  virus  signature 
analysis.  The  bandwidth  on  the  port  where  the  attack  is 
detected  can  be  throttled  back  or  the  port  traffic  can  be  com¬ 
pletely  contained.  This  functionality  gives  the  IT  staff  the  time 
it  needs  to  first  isolate  and  then  eliminate  viruses  and  worms 
before  they  cause  system-crashing  damage. 

THE  ULTIMATE  IN 
NETWORK  SECURITY 

Unlike  other  virus  detection  technologies,  the  virus-throttling  fea¬ 
ture  does  not  need  preknowledge  of  specific  worms  and  viruses  to 
do  its  job  because  virus  throttling  is  behavior-based.  ProCurve 
switches  with  virus  throttling  can  throttle  or  rate-limit  routed 
traffic,  or  completely  block  traffic  from  a  suspect  client. 

Not  all  virus  attacks  come  from  external  sources  outside  of 
a  network.  It  is  increasingly  important  to  protect  access  to  the 
internal  network  behind  the  firewall  to  prevent  virus  attacks 
and  threats  to  critical  systems.  Using  ProCurve  solutions,  users 
effectively  move  security  to  the  network  edge,  where  trouble 
can  be  resolved  before  any  damage  is  done  to  business-critical 
data.  ProCurve’s  value  proposition  delivers  intelligent  security 
with  ease  of  use,  without  sacrificing  performance. 

The  bottom  line  is  that  with  its  many  unique,  powerful,  and 
adaptable  features,  HP  ProCurve  Networking  delivers  on  the 
core  and  essential  value  propositions  of  high  network  availabili¬ 
ty,  efficiency,  security,  ease  of  use,  and  open-standards-based 
interoperability.  For  more  information,  go  to 
www.hp.com/learn/procurve. 
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SOUTHEAST 

SUMMIT 


Need  Peer  Advice  on 
Reducing  IT  Complexity? 

Find  Proven  Strategies  at  Our  Complimentary* 

Half-day  Conference 


Conquering  IT  Complexity 

Consolidation  and  Integration 
Strategies  for  Creating  Competitive 
Advantage 

•  Services-oriented  Architecture 

•  Web  Services 

•  Pruning  Redundant  Software 

•  The  “Virtual”  Enterprise,  Virtual  Servers 
and  Grid  Computing 

•  Simplifying  Security 

•  Incremental  Innovation  Through 
Data/Application  Integration 


To  apply  for  complimentary  registration: 

•  Visit  www.premier100.com/regional 

•  Or  call  Chris  Leger  at  888-299-0155 

‘Complimentary  registration  is  limited  to  qualified 
IT  end  user  professionals. 


Summit  Agenda 


8:00am  -  8:30am  Registration  and  Networking  Breakfast 


8:30am  -  8:45am 


8:45am  -  9:30am 


PREMIER  MM 


9:30am  -  1 0:00am 


PREMIER  MNORI 


1 0:00am  -  1 0:30am 


PREMIER  100  H6N0RI 


Welcome  and  Opening  Remarks 

Julia  King,  Executive  Editor  and  National 
Correspondent,  Computerworld 

Numbers  Don’t  Lie:  Benchmarking 
Data  Proves  That  Reducing  IT 
Complexity  Cuts  Costs  Across  Other 
Business  Functions 

Allan  Frank,  President  &  Chief  Technology  Officer, 
Answerthink,  Inc.  and  Senior  Hackett  IT  Fellow 

Slashing  Costs  and  Complexity  With 
Open  Source  Software  and 
Commodity  Hardware 

Dan  Agronow,  Chief  Information  Officer,  The 
Weather  Channel  Interactive,  Inc. 

The  Agile  IT  Infrastructure 

Frank  Enfanto,  Vice  President,  Health  Care 
Services  System  Delivery,  Blue  Cross/Blue 
Shield  of  Massachusetts 


10:30am  -  1 1 :00am  Refreshment  and  Networking  Break 

1 1 :00am  -  1 1 :30am  BESS  Standardizing  IT  for  Business  Growth 

BE  J  Joe  Puglisi,  Vice  President  and  Chief 

Information  Officer,  EMCOR  Group,  Inc. 

Project  Virtual  Gateway: 

Streamlining  Health  Services  Delivery 
in  Massachusetts 

Louis  Gutierrez,  Chief  Technology  Strategist, 
Commonwealth  Medicine,  University  of 
Massachusetts  Medical  School 


1 1 :30am  -  Noon 


.  j 


Noon  -  1 2:45pm  fy||0  Panel  Discussion  - 

H*.  Breaking  out  of  the  Technology  Tangle 

Slrfe’  M  Moderator:  Don  Tennant,  Vice  President, 

Editor  in  Chief,  Computerworld 
Panelists:  Allan  Frank,  President  and  Chief  Technology 
Officer,  Answerthink,  Inc,  and  Senior  Hackett  IT  Fellow 
Dan  Agronow,  Chief  Information  Officer,  The  Weather 
Channel  Interactive,  Inc.;  Frank  Enfanto,  Vice  President, 
Health  Care  Services  System  Delivery,  Blue  Cross/Blue 
Shield  of  Massachusetts;  Joe  Puglisi,  Vice  President  and 
Chief  Information  Officer,  EMCOR  Group,  Inc.;  Louis 
Gutierrez,  Chief  Technology  Strategist  Commonwealth 
Medicine,  University  of  Massachusetts  Medical  School 

1 2:45pm  -  2:00pm  Networking  Lunch 
2:00pm  Program  Concludes 


To  sponsor,  call  Chris  Leger  at  888-299-01  55. 
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BRIEIS 


Wiki  Creator  Joins 
Eclipse  Foundation 

Microsoft  Corp.  researcher  Ward 
Cunningham,  developer  of  the 
wiki  concept,  is  joining  the 
Eclipse  Foundation,  according  to 
a  weblog  entry  by  Eclipse  Execu¬ 
tive  Director  Mike  Milinkovich. 
Cunningham  will  help  the  non¬ 
profit  foundation  improve  collabo¬ 
rative  and  cooperative  efforts 
among  members.  Cunningham 
was  an  architect  in  Microsoft’s 
patterns  and  practices  group. 


CEO  Cites  Strengths 
In  IBM’s  Results 

Though  IBM’s  profits  declined 
slightly  in  the  third  quarter,  CEO 
Samuel  Palmisano  said  the  re¬ 
sults  showed  strength  in  hard¬ 
ware,  software  and  services. 


IBM  BYTHENUMBERS 

REVENUE 

PROFIT 

Q3’05 

S21.5B 

S1.5B 

S23.3B 

S1.6B 

CA  Buys  E-mail,  IM 
Management  Firm 

Computer  Associates  Internation¬ 
al  Inc.  has  agreed  to  buy  iLumin 
Software  Services  Inc.  as  part  of 
an  effort  to  offer  software  that 
manages  and  archives  e-mail  and 
instant  messages.  The  iLumin 
software,  which  competes  with 
offerings  from  EMC  Corp.,  IBM, 
Symantec  Corp.  and  smaller 
firms,  can  help  corporations  en¬ 
sure  compliance  with  regulations 
such  as  the  Sarbanes-Oxley  Act 
and  the  Health  Insurance  Porta¬ 
bility  and  Accountability  Act. 


Red  Hat  Co-founder 
Resigns  Board  Seat 

Bob  Young,  co-founder  and  for¬ 
mer  executive  of  Red  Hat  Inc.,  has 
resigned  from  the  Linux  software 
provider’s  board  of  directors. 
Young,  who  founded  the  company 
in  1S93,  served  in  executive  posts 
until  1999.  He  plans  to  focus  on 
the  growth  of  Lulu.com,  an  online 
independent  publishing  market¬ 
place  he  founded  in  2002. 


New  Obstacles  Dogging 
Outsourcing  Customers 


Compliance  requirements,  lack  of 
experienced  workers  sink  some  deals 


BY  THOMAS  HOFFMAN 

NEW  YORK 

utsourcing  deals 
in  IT  have  long 
been  marred  by 
poor  communica¬ 
tions  between  buyers  and 
suppliers,  along  with  failures 
by  customers  to  adequately 
manage  the  relationship  and 
measure  performance. 

At  the  Outsource  World  con¬ 
ference  here  last  week,  users 
and  analysts  said  outsourcing 
customers  are  now  facing  new 
challenges,  including  regulato¬ 
ry  requirements  and  shortages 
of  experienced  outsourcing 
relationship  and  contract 
managers. 

Joann  Martin,  vice  president 
and  director  of  solutions  mar¬ 
keting  at  Pitney  Bowes  Inc.  in 
Stamford,  Conn.,  listed  compli¬ 
ance  with  foreign  and  domes¬ 
tic  regulations  as  a  significant 
challenge  for  both  outsourcing 
customers  and  providers. 

For  example,  she  cited  the 
need  for  outsourcers  to  pro¬ 
vide  customers  with  State¬ 
ment  on  Auditing  Standards 
No.  70  (SAS  70)  reports  to  at¬ 
test  that  outsourcing  firms 
have  internal  controls  in  place 
to  help  their  customers  com¬ 
ply  with  the  Sarbanes-Oxley 
Act  and  other  regulations. 


Sometimes,  outsourcers 
complete  SAS  70  reports 
months  before  submitting 
them  to  customers,  thus  rais¬ 
ing  questions  about  whether 
they  are  valid  and  up  to  date, 
said  Michael  Corbett,  execu¬ 
tive  director  of  the  Interna¬ 
tional  Association  of  Out¬ 
sourcing  Professionals  (IAOP) 
in  Lagrangeville,  N.Y. 

On  the  other  hand,  said 
Martin,  regulations  can  some¬ 
times  be  beneficial.  For  in¬ 
stance,  new  patent-protection 
regulations  in  India  prompted 
Pitney  Bowes  to  change  its 
stance  on  the  idea  of  outsourc¬ 
ing  product  development  to 
companies  in  that  country, 
she  said. 

Pitney  Bowes  is  both  a  pro¬ 
vider  of  document  manage¬ 
ment  outsourcing  and  a  user  of 
IT  outsourcing  services,  hav¬ 
ing  redirected  75%  of  its  IT 
activities  to  outsourcers,  said 
Martin. 

Examining  the  Issues 

“Ninety  percent  of  outsourc¬ 
ing  deals  fail  because  cus¬ 
tomers  don’t  measure  the  re¬ 
sults  of  the  work  being  done,” 
said  Keith  Fiveson,  managing 
consultant  at  ITESA,  a  New 
York-based  consulting  firm. 

In  addition,  customers  are 


Cutting  the  Cord 


Primary  drivers  behind 
terminated  outsourcing 
contracts: 

Poor  provider  performance 


36% 


Change  in  strategic  direction 


16% 


#  *  *'#  *  *  >  *  *  S  it  *»»»»*  i»»»***»*» 

Moved  function  or  process  in-house 


11% 


Cost  savings  not  achieved 


7% 


SOURCE:  DIAMONDCLUSTER  INTERNATIONAL 
INC..  CHICAGO:  JUNE  2005  SURVEY  OF  210  OUT¬ 
SOURCING  CUSTOMERS  AND  242  PROVIDERS 

having  a  “tough  time”  finding 
people  with  experience  in 
managing  outsourcing  con¬ 
tracts  or  relationships  with 
outsourcing  providers,  he  said. 

The  growing  number  of  im¬ 
pediments  to  outsourcing  ap¬ 
pears  to  be  forcing  companies 
to  rethink  commitments  to  the 
strategy.  According  to  a  study 
of  210  outsourcing  customers 
and  242  providers  published 
by  DiamondCluster  Interna¬ 
tional  Inc.  in  June,  the  number 
of  customers  prematurely 
ending  both  domestic  and  off¬ 
shore  outsourcing  contracts 
within  a  year  jumped  from 
21%  in  2004  to  51%  this  year. 

Tom  Weakland,  a  managing 
partner  at  the  Chicago-based 
management  consulting  firm, 
said  the  chief  driver  for  cus- 


Use  of  Home-based  Agents  Challenging 


COMPANIES  such  as  Office  De¬ 
pot  Inc.  and  1-800-Flowers.com 
Inc.  that  have  outsourced  customer 
service  to  firms  that  use  home- 
based  agents  have  had  to  over¬ 
come  some  unique  challenges. 

The  biggest  challenge  for 
Office  Depot  when  it  began  out¬ 
sourcing  sales  and  service  sup¬ 
port  to  Golden,  Colo.-based 
Alpine  Access  Inc.  five  years  ago 
“was  convincing  people  that 


quality  wouldn’t  erode,"  said  Ju¬ 
lian  Carter,  director  of  operations 
and  strategic  partnerships  at  the 
Delray  Beach,  Fla.-based  retailer. 

To  overcome  those  fears,  Of¬ 
fice  Depot  assigns  workers  to 
listen  in  on  customer  calls  peri¬ 
odically  to  ensure  that  agents  are 
meeting  productivity  targets  and 
adhering  to  quality  requirements. 
Office  Depot  personnel  make 
sure  that  agents  follow  up  on 


sales  leads  and  follow  the  right 
procedures,  said  Carter. 

The  biggest  concerns  for 
1-800-Flowers  before  signing  up 
Alpine  Access  for  customer  ser¬ 
vice  were  fears  that  the  out¬ 
sourcing  firm’s  training  capabili¬ 
ties  wouldn’t  meet  its  needs,  said 
Lou  Orsi,  director  of  vendor  rela¬ 
tions  and  strategic  projects  at  the 
Westbury,  N.Y.-based  gift  retailer. 

“I  was  100%  wrong  -  these 
guys  [at  Alpine  Access]  have 
built  a  great  Web-based  training 


tomer  dissatisfaction  is 
heightened  competition  for 
staff  among  suppliers,  leading 
to  increased  turnover  and 
“more  issues  and  more  delays” 
for  customers. 

Burnout  is  another  problem, 
according  to  Tarun  Mehta,  a 
managing  director  at  Neo- 
IT.com  Inc.,  a  San  Ramon, 
Calif.-based  consultancy.  Man¬ 
agers  who  oversee  offshore- 
outsourcing  deals  often  must 
wake  up  before  dawn  to  con¬ 
nect  with  the  offshore  team.  A 
few  hours  later,  the  manager 
goes  to  the  office  and  puts  in  a 
full  workday.  That  schedule 
“might  work  for  a  week  or  two, 
but  after  six  months,  the  proj¬ 
ect  begins  to  slip,”  Mehta  said. 

He  said  sponsorship  and 
ownership  of  outsourcing 
deals  will  have  to  take  place 
“at  a  higher  level  in  the  orga¬ 
nization  than  it  does  today”  to 
succeed. 

Martin  said  another  barrier 
to  successful  outsourcing  out¬ 
comes  “is  the  perception  that 
it’s  all  about  reducing  costs.” 
Too  many  customers  fail  to 
recognize  other  business  value 
that  can  be  derived  from  the 
relationship,  she  said. 

For  instance,  Nokia  Corp.  is 
considering  outsourcing  a  sub¬ 
stantial  portion  of  its  research 
and  development  in  an  effort 
to  reduce  R&D  costs  to  less 
than  10%  of  revenue,  said  the 
IAOP’s  Corbett.  In  addition  to 
cutting  costs,  Nokia  is  looking 
to  outsource  much  of  its  extra¬ 
neous  R&D  work  in  order  to 
free  up  internal  workers  “to 
focus  more  on  those  areas  that 
differentiate  their  products,” 
Corbett  said.  ©  57730 


application,”  Orsi  said. 

Sandy  Ward,  vice  president  of 
sales  and  marketing  at  Alpine 
Access,  said  his  firm  maintains 
traditional  customer  service  con¬ 
trols,  such  as  call  recording,  re¬ 
porting  and  supervision  for  the 
at-home  workers.  The  company 
encourages  its  home-based 
agents  to  have  high-speed  Inter¬ 
net  connections  and  requires 
that  they  have  a  second  phone 
line  for  redundancy. 

-  Thomas  Hoffman 
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Looking  at  disk-based 
backup  but  not  sure  how 
to  make  it  happen?  Get 
the  smarter  disk  backup 
solution — Path  light®  VX 
from  ADIC,  the  leading 
provider  of  tape  libraries 
for  open-systems  backup.  * 


Smarter  disk-based  backup.  Pathlight  VX  is  the  scalable  backup  and  restore  solution  that  increases 
the  capacity  and  reduces  the  cost  of  disk  backup  by  integrating  disk  and  tape  in  a  single,  unified  system: 
Disk  gives  you  twice  the  backup  performance  of  conventional  libraries — and  even  faster  restore.  Tape 
delivers  scalability,  value,  secure  retention,  and  flexible  disaster  recovery.  You  get  the  best  of  both 
technologies  in  a  single  solution  that  slips  right  into  your  existing  backup  system. 


Clear  investment  protection.  With  Pathlight  VX,  you  can  boost  your  backup  arid  restore  whether  you 
need  a  system  for  3.8  TB  or  3,000  TB — and  pay  a  lot  less  for  it.  You  can  even  use  your  own  tape  library 
as  part  of  the  system — tape  storage  can  be  supplied. by  one  of  Anir'°  - A*  k.*-  v  ■ 
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Indian  Bank  Chooses 
Linux  for  Internal  Apps 

BANGALORE,  INDIA 

anara  bank,  a  large  bank  that’s 
mostly  owned  by  the  Indian  gov¬ 
ernment,  has  opted  to  shift  the 
applications  used  at  more  than  1,000  of 
its  2,500  branch  offices  across  India  to 
Red  Hat  Enterprise  Linux. 

The  bank  is  migrating  internally  de¬ 
veloped  branch-automation  software 
from  systems  running  on  MS-DOS  and 
NetWare  to  Red  Hat  Inc.’s  version  of 
Linux,  said  a  source  at  Bangalore-based 
Canara  who  asked  not  to  be  identified 
because  of  internal  rules  that  don’t  al¬ 
low  workers  to  talk  to  the  news  media. 

“We  decided  to  use  Linux,  as  it  was 
more  cost-effective,  its  performance 
was  good,  and  the  soft¬ 
ware  was  open-source,” 
the  source  said,  adding 
that  Canara  is  installing 
Red  Hat  Enterprise  Linux 
on  more  than  1,000 
servers  and  10,000  desk¬ 
top  PCs. 

More  than  500  branches 
have  already  made  the 
transition  to  the  Linux 


software,  according  to  Raleigh,  N.C.- 
based  Red  Hat. 

■  JOHN  RIBEIR0,  IDG  NEWS  SERVICE 


Tata  Wins  Outsourcing 
Pact  With  U.K.  Insurer 

MUMBAI,  INDIA 

earl  group  ltd.,  an  insurance 
and  pensions  firm  in  Peterbor¬ 
ough,  England,  has  hired  Indian 
outsourcing  vendor  Tata  Consultancy 
Services  Ltd.  to  manage  its  business 
operations  and  the  systems  that  sup¬ 
port  them. 

TCS,  which  is  based  in  Mumbai,  val¬ 
ued  the  12-year  contract  at  £486  million 
($856  million  U.S.)  and  said  that  the 
deal  will  create  additional  new  rev¬ 
enue  opportunities  for  the  company  in 
the  U.K.  beyond  the  IT 
services  market. 

The  pact  calls  for  TCS 
to  run  Pearl  Group’s  oper¬ 
ations  through  a  new  sub¬ 
sidiary  in  Peterborough. 
The  subsidiary  will  employ 
about  950  of  Pearl  Group’s 
1,100  workers,  with  the 
balance  staying  on  at  the 
insurance  company. 


TCS  said  the  new  unit  will  also  offer 
business  process  outsourcing  services 
to  other  companies  in  the  U.K.’s  life 
insurance  and  pension  industries. 

■  JOHN  RIBEIR0,  IDG  NEWS  SERVICE 


Capital  Firm  Says  Aussie 
Innovation  Needs  Funds 

ADELAIDE,  AUSTRALIA 

layford  capital,  a  technology 
investment  firm  based  here,  is 
warning  that  a  national  drought 
of  start-up  funding  is  threatening 
innovation  within  the  Australian  IT 
industry. 

Playford  Capital  CEO  Amanda  Hey- 
worth  last  week  called  for  “business 
angels”  —  individuals  who  invest  per¬ 
sonal  funds  in  private  companies  —  to 
dig  deep  to  ensure  that  Australia  re¬ 
mains  an  attractive  place  to  work  in 
the  high-tech  sector. 

“If  you’re  not  seeding  new  compa¬ 
nies  and  innovation,  you’ll  end  up  with 
a  stagnant  economy,”  which  could  lead 
to  “a  long-term  problem  for  Australia,” 
Heyworth  said. 

Playford  Capital  co-hosted  the  VC 
Connect  venture  capital  conference 
in  Adelaide  to  discuss  such  issues. 

©  57673 
■  SANDRA  ROSSI, 

C0MPUTERW0RLD  TODAY  (AUSTRALIA) 


Compiled  by  Mike  Bucken. 


Briefly  Noted 

NEC  Corp.  in  Tokyo  said  it  plans  to 
install  an  undersea  fiber-optic  cable 
between  India  and  Sri  Lanka.  NEC 
signed  contracts  with  Sri  Lanka 
Telecom  Ltd.  in  Colombo  and  Bharat 
Sanchar  Nigam  Ltd.  in  New  Delhi  to 
construct  the  320-kilometer  cable. 
■  MARTYN  WILLIAMS,  IDG  NEWS  SERVICE 


Philips  Electronics  NV  in  Amster¬ 
dam  said  its  profit  increased  23% 
in  the  third  quarter,  boosted  by  the 
sale  of  several  noncore  assets.  The 
company  said  net  income  jumped  to 
1.44  billion  euros  ($1.73  billion),  up 
from  1.17  billion  euros  ($1.4  billion)  a 
year  earlier.  Sales  rose  5%  to  7.63 
billion  euros  ($9.1  billion),  up  from 
7.23  billion  euros  ($8.6  billion). 

■  JOHN  BLAU,  IDG  NEWS  SERVICE 


Samsung  Electronics  Co.  this 
week  will  begin  selling  its  second 
cell  phone  to  feature  a  disk  drive. 
The  SPH-V7900  measures  103 
millimeters  by  52mm  by  27.6mm 
and  weighs  165  grams.  It  will  cost 
about  736,370  South  Korean  won 
($700).  Seoul-based  Samsung  also 
said  it’s  building  a  disk-equipped 
phone  for  the  European  market. 

■  MARTYN  WILLIAMS,  IDG  NEWS  SERVICE 


GLOBAL  FACT 


Projected  growth  of  PC 
shipments  in  Latin 
America  this  year. 

SOURCE:  Gartner  Inc., 
Stamford,  Conn. 


Sarbanes-Oxley  Adds  to  IT  Costs 
But  Pushes  Companies  to  Prepare 

Compliance  initiatives  yield  processes 
for  dealing  with  future  rules,  execs  say 


BY  PATRICK  THIBODEAU 

ORLANDO 

Compliance  burdens  posed  by 
the  Sarbanes-Oxley  Act  are 
proving  to  be  costly  for  many 
IT  departments,  according  to 
Gartner  Inc.  But  companies 
may  be  better  equipped  to 
meet  any  new  federal  regula¬ 
tions  thanks  to  the  processes 
they  have  developed  for  com¬ 
plying  with  the  law,  IT  execu¬ 
tives  said  here  last  week. 

Gartner  estimates  that  the 
government’s  Sarbanes-Oxley 
mandates  have  led  to  an  aver¬ 
age  increase  of  3.3%  in  corpo¬ 
rate  IT  costs.  The  financial 
reporting  law  has  spurred 


increased  spending  in  areas 
such  as  records  management 
and  security,  as  well  as  pur¬ 
chases  of  new  tools  needed  to 
ensure  the  accuracy  of  finan¬ 
cial  data,  the  firm  says. 

At  Eaton  Corp.,  a  Cleveland- 
based  maker  of  hydraulic 
systems,  factory  automation 
devices  and  other  industrial 
products,  regulatory  compli¬ 
ance  issues  have  boosted  IT 
spending  by  about  1%,  or 
$3  million,  according  to  CIO 
Robert  Sell. 

But  Sell,  who  took  part  in  a 
panel  discussion  at  Gartner’s 
Symposium/ITxpo  2005  con¬ 
ference  here,  added  that  if 


new  federal  regulations 
emerge,  his  strategy  will  be  to 
rely  on  the  same  processes 
that  Eaton  set  up  to  ensure 
Sarbanes-Oxley  compliance. 
He  now  has  one  office  that 
manages  the  IT  issues 
associated  with  the  law  in  ad¬ 
dition  to  intellectual  property 
protection  and  data  privacy. 
“We  are  going  to  leverage  the 
people  and  resources  across 
those  disciplines,”  Sell  said. 

Other  IT  managers  agreed 
that  the  corporate  response 
needed  for  complying  with 
Sarbanes-Oxley  is  providing 
organizational,  governance 
and  educational  frameworks 
that  should  help  them  to  deal 
with  compliance  in  the  future. 

Gint  Dargis,  CIO  at  Richard¬ 
son  Electronics  Ltd.  in  LaFox, 


HWhat  a  great 
opportunity  - 
especially  for 
people  in  IT  -  to 
demonstrate  some 
leadership. 

ROBERT  SELL,  CIO,  EATON  CORP. 

Ill.,  said  the  maker  of  radio¬ 
frequency  and  wireless  com¬ 
ponents  now  has  the  ability 
“to  scope  out  the  impact  to  the 
company”  if  new  mandates 
materialize. 

Moreover,  regulations  “are 
coming  together  —  these 
things  are  not  going  apart,” 
said  Jim  Magliano,  senior  in¬ 
formation  systems  director  at 
West  Pharmaceutical  Services 
Inc.,  a  Lionville,  Pa.-based 
company  that  makes  compo¬ 
nents  for  syringes,  IVs  and 
other  medical  devices.  To  il¬ 
lustrate  his  point,  Magliano 


said  that  many  of  the  require¬ 
ments  posed  by  Sarbanes- 
Oxley  also  apply  to  health  care 
regulations,  such  as  the  Health 
Insurance  Portability  and  Ac¬ 
countability  Act. 

The  one  thing  companies 
can’t  do  is  treat  regulatory 
mandates  lightly,  warned  pan¬ 
el  members. 

It’s  important  to  ensure  that 
top  executives  and  board 
members  take  compliance 
seriously  enough,  said  Ken 
Coleman,  chairman  and  CEO 
of  ITM  Software  Corp.,  a  busi¬ 
ness  management  tools  ven¬ 
dor  in  Mountain  View,  Calif. 
“This  is  superimportant.  The 
consequences  [of  not  comply¬ 
ing]  are  significant.” 

Sell  noted  that  helping  a 
company  meet  its  regulatory 
requirements  is  a  task  IT  man¬ 
agers  should  willingly  step  up 
to.  “What  a  great  opportunity 

—  especially  for  people  in  IT 

—  to  demonstrate  some  lead¬ 
ership,”  he  said.  ©  57741 


We  deliver  something  for  your 
network  you  thought  was  lost  forever. 
Control. 


It's  time  for  you  to  take  back  your 


network.  And  the  3Com*  TippingPoint 
security  solution  is  the  way  to  do  it. 
But  don't  take  our  word  for  it.  Take 
the  word  of  SC  Magazine.  They  awarded 
us  Best  Security  Solution  2005. 


And  if  you  think  they’ve  got  good 
things  to  say,  go  to  our  website  and 
hear  from  our  customers. 
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Security  Products  and  iSCSI 
Arrays  Set  for  SNW  Unveiling 


Disk-to-disk  backup  options  are  also 
expected  to  be  featured  at  conference 


BY  LUCAS  MEARIAN 

STORAGE  NETWORKING 
World  will  feature  the 
unveiling  of  a  dozen 
or  more  products,  in¬ 
cluding  data  protection  tech¬ 
nology,  IP  storage  arrays  and 
big,  cheap  disk  systems  based 
on  Serial  ATA  technology. 

At  the  conference  in  Orlan¬ 
do  this  week,  users  can  see 
new  Internet  SCSI  technol¬ 
ogy,  which  is  in  demand  be¬ 
cause  it’s  less  expensive  and 
easier  to  use  than  Fibre  Chan¬ 
nel  storage-area  networks 
(SAN),  said  Josh  Howard,  an 
enterprise  storage  specialist 
at  IT  reseller  CDW  Corp.  in 
Vernon  Hills,  Ill. 

Vendors  expected  to  unveil 
iSCSI  products  at  the  confer¬ 
ence  include  Intransa  Inc.  and 
JMR  Electronics  Inc. 

San  Jose-based  Intransa 
plans  to  demonstrate  a  10 
Gigabit  Ethernet  iSCSI  IP2000 
SAN  that  will  offer  more  than 


ANNOUNCEMENTS 

be,  unveiled 

«  this  wee^  at  Storage 
V  Networking  Worid: 

FCIfzq,  a  10-port  stor¬ 
age’ security  appliance  from  Decru 
Inc.  with  lOGbit/sec.  encryption  and 
compression  throughput  for  Fibre 
Channel  tape  systems. 

UA?  TBS,  a  1U  (1.75-in.-high)  NAS  - 
.  array froniSilicon  Graphics  Inc.  with 
a  starting  price  of  S25.599  for  2.8TB 
of  capacity,  which  scales  to  16.8TB 
for  under  $60. 000.  \. 

VtV-V  "?*  ’  *  ’  *  .•  *>'•  »*Si  v. i .  v . , 

®  $  •  ".'-Td.'.t'.  a  clustered  file  storage 
:  system  from  Isilon  Systems  fpc.  with 
:;2S0TB  capacity. using  Hitachi's 
■'500GB  Serial  ATA  ii  drives. 


%bC/aKiSA!;;  T  nSiVES-from  Max- 
fjp Cs:0.  that  run  at  7.200  RPM  and 
piftef-3 16MB  buffer,  a.itd  native  com¬ 
mand  queuing.  ;  {■; 

A....... . 

iplyKf i  • ,  a  hosl 
gfe'Sitfepter  from  Emulex  Corp.  that 
sjfpts  enhanced  SAN  management 
vrarld  .data  protection..  ,  ’ 


twice  the  throughput  of  Fibre 
Channel  technology.  The 
product  is  slated  to  ship  in 
mid-2006. 

Larry  Newman,  senior  net¬ 
work  engineer  at  ARG  Ser¬ 
vices  Inc.,  a  subsidiary  of  Air 
Routing  Group  Inc.  in  Hous¬ 
ton,  has  installed  two  4TB 
iSCSI  SANs  from  Intransa. 

The  arrays  cost  the  company 
about  $240,000,  which  is  less 
than  the  $300,000  it  would 
have  cost  for  a  single  Fibre 
Channel  array  SAN  from  EMC 
Corp.,  he  said. 

Newman  said  the  iSCSI 
system  provides  lGbit/sec. 
data-transfer  rates  and  offers 
some  disaster  recovery  capa¬ 
bility  by  replicating  data  be¬ 
tween  the  two  iSCSI  arrays, 
which  are  one  and  a  half  miles 
apart.  The  replication  takes 
place  using  wireless  routing 
technology  from  Cisco  Sys¬ 
tems  Inc. 

Chatsworth,  Calif. -based 
JMR  is  unveiling  an  array  it 
developed  with  LSI  Logic 
Corp.,  Intel  Corp.  and  Left- 
Hand  Networks  Inc.  An  8TB 
box  will  sell  for  $13,500.  The 
array  ships  on  Nov.  1. 

Disk-to-Disk  Option 

Tony  Prigmore,  an  analyst  at 
Enterprise  Strategy  Group  Inc. 
in  Milford,  Mass.,  expects 
users  to  evaluate  disk-to-disk 
backup  systems  at  the  confer¬ 
ence.  Such  systems  can  either 
replace  tape  systems  or  act  as 
a  liaison  between  servers  and 
tape  backup. 

CDW  recently  began  the 
task  of  replacing  its  tape 
libraries  by  installing  two 
EMC  Clariion  disk  libraries 
with  61TB  of  capacity,  said 
Doug  Zelinka,  manager  of 
IT  infrastructure.  T  he  disk- 
to-disk  technology  has  boost¬ 
ed  Zelinka’s  backup  data- 
transfer  rates  almost  tenfold 
—  to  3,200MB/min.  from  the 


350MB/min.  rate  of  the  tape 
drives,  he  said. 

The  disk  backups  not  only 
reduce  CDW’s  backup  win¬ 
dow  but  also  help  with  data 
restores  in  an  area  of  the 
country  that  is  plagued  by 
power  outages,  Zelinka  said. 

Zelinka  is  concerned  about 
systems  reliability  in  light  of 
the  number  of  disasters  over 


the  past  year  or  so.  Therefore, 
he  is  exploring  ways  to  repli¬ 
cate  data  to  a  new  CDW  distri¬ 
bution  facility  in  Las  Vegas. 

Several  vendors,  including 
EMC,  Availl  Inc.  and  STOR- 
Server  Inc.,  plan  to  bring  out 
continuous  data-protection 
products  at  the  conference, 
co-sponsored  by  Computer- 
world  and  the  Storage  Net¬ 


working  Industry  Association. 

In  addition,  Hopkinton, 
Mass.-based  EMC  will  intro¬ 
duce  RecoveryPoint,  a  soft¬ 
ware  product  that  allows  ad¬ 
ministrators  to  recover  data 
from  any  point  in  time  and 
place  markers  on  data  in  order 
to  recover  from  a  specific 
time. 

RecoveryPoint  is  integrated 
with  the  management  inter¬ 
face  in  EMC’s  Replication 
Manager  software  and  will 
be  integrated  with  the  com¬ 
pany’s  Legato  Networker  soft¬ 
ware  in  the  first  half  of  next 
year.  ©  57740 


EMC  Virtualization  Plan  Is  on  Schedule,  Executive  Says 


Mark  Lewis,  chief 
development  officer 
at  EMC  Corp.,  talked 
to  Computerworld  last 
week  about  the  state 
of  the  company’s 
Invista  virtualization 
software,  which  has 
yet  to  ship  in  bulk. 

Lewis  also  addressed 
moves  by  rivals  IBM  and  Cisco 
Systems  Inc.  to  sell  virtualization 
products  for  the  entire  data  cen¬ 
ter,  from  servers  to  back-end 
storage. 

There  seem  to  be  a  lot  of  de¬ 
lays  in  getting  the  Invista  vir¬ 
tualization  technology  out. 
What’s  the  holdup?  We’re 
really  where  we  wanted  to  be 
with  it.  We  said  it  would  be  in 
very  limited  availability  this  year. 
We  didn’t  expect  material  im¬ 
pact.  We  didn't  want  or  expect 
any  volume  ramp.  We  said  cus¬ 
tomers  should  put  it  in  develop¬ 
ment  environments  and  said  it 
was  for  enterprise  customers. 

It’s  undergoing  evaluation. 

So  you’re  not  experiencing 
hurdles  in  getting  this  out? 

We  very  much  acknowledged 
this  was  a  major  technology 
advancement.  It  involved  new 
switch  intelligence  and  a  new 
product  from  us.  We  have  a  lot 
of  customers  looking  at  it.  A  rea¬ 
sonable  number  have  it  in  their 
development  centers. 

When  can  customers  expect 


Invista  to  be  generally 
available?  It’s  going  to 
depend  on  our  customers’ 
development  cycles.  Gen¬ 
eral  availability  will  just  be 
when  our  customers  put  it 
into  production. 

Do  you  expect  Invista 
to  be  ready  for  main¬ 
stream  use  by  2006  or 

2007?  I  think  the  product  will 
start  deployments  into  produc¬ 
tion  environments  early  next 
year.  The  difference  is  that  we 
don’t  expect  quantities  to  be  sig¬ 
nificant  or  there  to  be  a  lot  of 
major  adoptions  until  the  2007 
time  frame.  It’s  the  typical  ramp. 

IBM  and  Cisco  have  both 
come  out  saying  they’re  going 
to  virtualize  the  data  center. 
How  is  EMC  going  to  take  on 
that  challenge?  Obviously,  with 
VMware  [we]  have  core  server 
virtualization  technology.  1  think 
really  the  thing  that  sets  us 
apart  is  we  have  the  leading  In¬ 
tel-based  virtualization  technol¬ 
ogy  today.  We,  with  Invista, 
have  taken  the  extra  effort  to  do 
virtualization  right  in  storage. 

We  just  acquired  Rainfinity, 
which  I  believe  for  NAS  virtual¬ 
ization  and  global  name-space 
capability  is  a  very  highly  func¬ 
tional  set  of  tools.  Last  Febru¬ 
ary,  we  acquired  [network  sys¬ 
tems  management  software 
vendor]  Smarts,  which  delivers 
many  key  pieces  of  cross-do- 
main  technology  required  to 


connect  all  of  these  virtual 
environments  together.  The 
other  folks  talk  a  good  line,  but 
we’re  doing  the  heavy  lifting  in 
storage. 

When  do  you  expect  to  have 
Rainfinity’s  technology  inte¬ 
grated  with  your  network- 
attached  storage  technol¬ 
ogy?  The  simple  fact  is . . .  there 
is  no  integration  work  neces¬ 
sary.  The  nice  thing  also  is  it 
works  across  multiple  platforms 
so  we  can  provide  for  seamless 
virtualization  across  EMC,  Net¬ 
work  Appliance  and  even  Win¬ 
dows-based  file  systems. 

Did  the  decision  to  halt  sales 
of  your  NetWin  Windows- 
powered  NAS  arrays  indicate 
a  movement  away  from  Win¬ 
dows?  No.  We  wanted  to  part¬ 
ner  with  Microsoft  and  still  do 
that  in  as  many  areas  as  possi¬ 
ble.  We  looked  at  the  NetWin 
opportunity  as  just  that  -  a  way 
to  fill  out  our  overall  NAS  prod¬ 
uct  line.  What  we  clearly  found 
is  that  EMC  is  a  technology 
company,  and  there  may  be 
areas  of  the  market  where  we 
play  and  don't  play. 

What  do  you  think  will  be  the 
hot  topic  at  Storage  Net¬ 
working  World  next  week? 

I  think  it  will  be  information 
security.  I  think  you're  going  to 
see  that  market  hit  a  fairly 
chaotic  state  right  now. 

-  Lucas  Mearian 
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Business  Objects  CEO  Explains  Move 


BY  HEATHER  HAVENSTEIN 

Business  Objects  SA  last  month 
named  John  Schwarz  as  CEO, 
replacing  company  founder 


Bernard  Liautaud,  who  contin¬ 
ues  as  chairman  of  the  board 
and  also  assumed  the  new  role 
of  chief  strategy  officer  [Quick- 


Link  56822 ].  Previously, 
Schwarz  was  president  of 
Symantec  Corp.  He  recently 
spoke  to  Computerworld 


about  his  goals  as  CEO  of  the 
business  intelligence  company. 

Why  did  you  make  the  move  to 
Business  Objects,  a  smaller  firm 
than  Symantec?  I  always  want¬ 
ed  to  be  a  CEO.  Most  of  the 


your 

infrastructure 

may  protect  employees 

__  inside 


What  protects 
employees  outside? 


View  the  latest  Websense  Security  Labs  webcast: 

"Six  Degrees  of  Spyware" 

www.  websensesecuritylabs.  com/webcast 


It's  no  surprise;  employees  are 
often  unaware  of  the  threats  that  put 
the  security  of  their  laptops — and  your 
network— at  risk  every  day. 

Websense  Remote  Filtering  extends  your 
usage  policies  to  the  mobile  workforce, 
keeping  you  protected  from  external 
web  threats  anytime,  anywhere. 

Close  the  security  gap. 

Download  your  free  evaluation  today. 
www.websense.com/remote 


SECURING  PRODUCTIVITY,, 


©  2005  Websense.  Inc  All  rights  reserved  Websense  is  a  registered  trademark  of  Websense,  Inc.  in  the  United  States  and  certain  international  markets. 


time,  when  you  get  asked  to 
come  in  and  be  a  CEO  . . . 
there  is  something  wrong  at 
that  business.  You  are  coming 
in  to  restructure,  to  right  the 
business.  This  is  not  the  case 
at  Business  Objects.  It  is  per¬ 
forming  well,  there  are  no 
outstanding  SEC  problems, 
no  concerns  that 
would  force  me 
to  solve  past 
problems. 

You  and  others  at 
Business  Objects 
say  you  want  the 
company  to  grow 
from  the  $1  billion 
revenue  mark  to  be 
come  one  of  the  world’s  10  largest 
software  companies.  How  do  you 
plan  to  do  that?  We  are  some¬ 
where  in  the  low  20s  now.  We 
have  to  double  the  size  of  the 
business.  There  is  $7  billion 
worth  of  [potential]  revenue 
in  our  market.  We  have  14% 
to  15%  market  share.  In  the 
broader  market  [for]  analytics 
and  tools,  the  market  doubles 
to  $14  billion.  We  will  proba¬ 
bly  continue  to  acquire  and 
add  capacity  and  customers 
and  products. 

Do  you  plan  to  move  into  new 
markets  as  well?  Yes.  Cus¬ 
tomers  are  asking  us  for  con¬ 
tent  that  speaks  specifically  to 
their  kind  of  business.  Up  to 
today,  the  vast  majority  of  our 
effort  and  products  have  fo¬ 
cused  on  horizontal  applica¬ 
tions. 

Will  Business  Objects  be  building 
these  tools?  It  is  not  practical 
for  us  to  do  all  these  applica¬ 
tions  ourselves.  We  will  be 
looking  to  OEMs. 

What  are  the  company’s  plans  for 
Infommersion,  the  data  visualiza¬ 
tion  company  you  just  agreed  to  ac¬ 
quire?  Our  business  is  all  about 
presenting  data.  Infommersion 
[has]  the  best  tool  we  have 
found  that  does  that.  With  very 
easy-to-use,  end-user-oriented 
techniques,  you  can  visualize 
or  picture  any  amount  of  in¬ 
formation.  It  allows  us  to  take 
our  complex  tools  and  target 
them  at  the  end-user  commu¬ 
nity  rather  than  at  the  IT  de¬ 
partment.  ©  57712 
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Put  a  stop  to  painful  application  performance. 


Here’s  how 
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NETWORK  EXCELLENCE 


Are  your  remote  and  branch 
offices  fightin’  mad? 


As  your  business  grows,  so  do  your  headaches.  Remote  and  branch- 
office  users  expect  the  same  level  of  application  performance  you 
deliver  to  headquarters.  Anything  less  and  they'll  quickly  blame  you. 

So  it’s  up  to  you -and  your  network -to  maintain  that  peak  level  of 
performance  everywhere,  improving  productivity  and  avoiding  user  frustration 


Juniper  Networks  can  help.  Our  application  acceleration  platforms  speed  the 
performance  of  web-based  client-server  applications  for  all  users  across  your 
business -whether  they’re  in  the  next  cubicle  or  on  another  continent.  The 
result  is  a  far  more  efficient  experience  for  all,  using  any  and  every  networked 
application.  And  by  delivering  LAN-like  performance  to  branch-office  users, 
telecommuters  and  road  warriors  alike,  everyone  is  more  productive. 


►  SECURE  AND  ASSURED  NETWORKING. 
SUPERIOR  AND  SPEEDY  PERFORMANCE. 


Juniper  Networks’  innovative  application  acceleration  platforms  reduce  IT 
costs  by  enabling  data  center  consolidation  and  server  centralization -letting 
you  cut  hardware  and  application  expense  while  simplifying  administration, 
management  and  regulatory  compliance.  You  get  industry-leading  performance 
and  security  while  reducing  network  and  infrastructure  costs  on  everything 
from  web  servers  and  application  licenses  to  data  center  hardware  and 
WAN  services. 


^  (J  We  tested  Juniper  Networks  WX  50  and  WX  20 
systems  between  our  headquarters  and  remote 
sites  and  noticed  an  immediate  improvement  in 
application  performance  across  our  wide  area 
network.  We  were  delighted  to  find  a  solution 
that  could  easily  plug  into  our  network  and 

operate  with  minimal  setup.  77 

-  Bill  Robertson, 

IT  Manager,  De  Bortoli  Wines 


EXPECT  MORE  FROM  YOUR  NETWORK.  NOW. 


Get  solutions  specifically  crafted  to  accelerate  your  application  -  only  from 
Juniper  Networks.  For  your  free  trial  and  customized  Network  Health  Report, 
visit  www.juniper.net/freetrial 


www.juniper.net 


888-JUNIPER  (888-586-4737) 
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Congratulations 
Award  Recipients! 


Computerworld’s  Enterprise  Management  World,  in  conjunction  with  the 
Distributed  Management  Task  Force  (DMTF),  proudly  announced  the  results 
of  the  second  annual  “Best  Practices  in  Enterprise  Management”  Awards 
Program.  This  program  recognized  case  studies  highlighting  noteworthy 
solution  implementation  projects  and  deployments. 


Award  Recipients  in  each  of  the  following  categories  were  recognized  during  an  awards 
ceremony  at  Enterprise  Management  World  in  Bethesda,  MD,  September  14th: 

Distributed  Systems  and  Infrastructure  Implementation 

•  Fulton  County  Department  of  Information  Technology  -  Atlanta,  Georgia 

*  Rent-A-Center,  Inc.  -  Plano,  Texas 

Honorable  Mentions:  Denver  Health  Hospital  and  Medical  Center  -  Denver,  Colorado 

Iron  Age  Corporation  -  Westborough,  Massachusetts 
Oklahoma  Heart  Hospital  -  Oklahoma  City,  Oklahoma 
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Best  Practices 

IN  ENTERPRISE  MANAGEMENT 


AWARDS  PROGRAM 


AWARDS  PROGRAM  EXCLUSIVELY  SPONSORED  BY: 

EMC2 

where  information  lives 


Security  and  Risk  Management 

•  BT  -  New  York,  New  York 

•  Lehman  Brothers  -  New  York,  New  York 

Honorable  Mentions:  Forsyth  County  -  Winston-Salem,  North  Carolina 

MasterCard  International  -  O'Fallon,  Missouri 
Media  General  -  Richmond,  Virginia 

Industry  Regulation,  Compliance  and  Corporate  Governance 

•  The  Guardian  Life  Insurance  Company  of  America  -  New  York,  New  York 
Honorable  Mentions:  Aspect  Communications  -  San  Jose,  California 

Finisar  -  Sunnyvale,  California 

Managing  to  Improve  TCO/ROI 

•  Countrywide  Financial  Corp.  -  Calabasas,  California 
•SMART  Communications,  Inc.  -  Makati  City,  Philippines 

Honorable  Mentions:  Belgacom  -  Brussels,  Belgium 

Calpine  Corporation  -  Houston,  Texas 
Oakland  County  -  Pontiac,  Michigan 


innovation  and  Promise 

•  City  of  Austin  -  Austin,  Texas 

•  Northeastern  University  -  Boston,  Massachusetts 

Honorable  Mentions:  Intel  (in  partnership  with  RosettaNet)  -  Santa  Clara,  California 

Kroll  Ontrack  Inc.  -  Eden  Prairie,  Minnesota 
The  New  York  Botanical  Garden  -  Bronx,  New  York 
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DON  TENNANT 


Leaving  a  Mark 


NE  DAY  IN  Mrs.  Campbell’s  seventh- 
grade  English  class,  a  pail  of  soapy  wa¬ 
ter  with  a  sponge  was  being  passed  up 
and  down  the  rows  of  desks  so  that  we 
students  could  clean  our  cruddy  desk¬ 
tops.  (Note  to  younger  readers:  I  mean  the  tops  of 
our  desks.  This  was  40  years  ago.)  Mrs.  Campbell 
told  us  to  stop  talking  during  this  process  and  take 


out  our  notebooks  (the 
kind  with  paper  that  you 
write  in).  As  I  was  taking 
out  my  notebook,  I  turned 
around  to  check  on  the 
progress  of  the  approach¬ 
ing  pail.  Mrs.  Campbell 
thought  I  was  talking  to 
the  girl  behind  me,  so  she 
told  me  to  come  to  the 
front  of  the  class. 

I  told  her  that  I  wasn’t 
talking,  but  to  no  avail. 

She  took  a  piece  of  chalk 
and  drew  a  small  circle  on  the  black¬ 
board  and  told  me  to  stick  my  nose 
in  it.  Having  been  raised  to  never 
question  authority,  I  did  as  I  was 
told.  So  there  I  was,  slightly  bent 
over  because  of  where  Mrs.  Camp¬ 
bell  had  drawn  the  little  circle,  with 
my  nose  against  the  blackboard. 

Let’s  just  say  it  left  a  mark.  If 
there’s  one  thing  I  haven’t  tolerated 
well  since  that  day,  it’s  injustice. 

So  last  week,  as  I  was  reading 
some  of  the  data  that  yielded  the 
special  report  on  our  2005  Salary 
Survey  in  this  week’s  issue,  I  was 
bothered  by  the  difference  between 
the  average  total  compensation  for 
male  and  female  IT  professionals. 

For  men,  the  figure  is  $89,437;  for 
women,  it’s  $80,528.  Same  jobs.  But 
women  are  paid  about  90  cents  for 
every  dollar  that  men  are  paid. 

That  there’s  a  gender  wage  gap  is, 
of  course,  news  to  no  one.  Nor  is  it 
news  that  the  gap  exists  in  the  IT  pro¬ 
fession.  A  reluctance  among  women 
to  advance  their  careers  by  means  of 
r  vocation  (primarily  stemming  from 
their  partners’  career  aspirations)  has 
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long  been  cited  as  a  ma¬ 
jor  reason  for  the  com¬ 
pensation  disparity.  I 
agree  that’s  a  factor. 

But  there  has  to  be 
more  to  it  than  that.  It’s 
widely  held  that  men 
work  more  hours  than 
women  do,  because  of 
family  considerations, 
but  that’s  not  what  our 
survey  found.  While  the 
survey  results  show  that 
women  value  things  such 
as  paid  time  off  and  a  better  work/life 
balance  more  than  men  do,  the  mean 
number  of  hours  they  work  is  statisti¬ 
cally  equal.  So  why  the  disparity? 

Nancy  Newkirk,  corporate  IT  di¬ 
rector  at  Boston-based  International 
Data  Group,  Computer-world’s  parent 
company,  wonders  whether  women 


negotiate  as  well  as  men  do  and 
whether  women  underestimate  their 
worth.  “When  I’m  hiring,  I  see  re¬ 
sumes  all  the  time  from  men  who  are 
really  underqualified,”  she  says.  “I 
can  tell  you  honestly,  I  don’t  think  I 
see  women  who  submit  a  resume  for 
a  job  they  aren’t  qualified  for.” 

Whatever  the  reasons,  we  shouldn’t 
be  content  with  the  status  quo.  True, 
IT  professionals  fare  better  than 
college  graduates  in  general.  Accord¬ 
ing  to  research  conducted  earlier 
this  year  by  the  American  Associa¬ 
tion  of  University  Women,  college- 
educated  women  earn  only  72  cents 
for  every  dollar  earned  by  their  male 
counterparts. 

But  how  much  injustice  is  accept¬ 
able?  For  40  years,  I’ve  wished  I’d 
picked  up  the  piece  of  chalk  and 
drawn  a  big  “N”  just  to  the  left  of 
that  little  circle,  crossed  my  arms 
and  looked  Mrs.  Campbell  straight 
in  the  eye. 

No  injustice  is  acceptable.  Let 
that  be  the  mark  left  on  society  by 
this  generation  of  IT  professionals. 

©  57664 
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THORNTON  A.  MAY 

Exfoliating 

Dated  IT 
Assumptions 

Researchers  at  the  IT 
Leadership  Academy 
recently  met  with  sev¬ 
eral  groups,  including  leading 

IT  practitioners  in  large  and  midmar¬ 
ket  enterprises;  progressive  executives 
in  federal,  state  and  local  government 
agencies;  hiring  managers  at  vendors; 
senior  executives  at  IT  service  firms; 
deans  of  major  business  schools;  presi¬ 
dents  of  community  colleges;  and 
strategic  planners  at  staffing  firms. 

The  purpose:  to  ask  about  assumptions 
in  their  organizations  that  need  to  be 
exfoliated. 

Here  are  three  of  the  worst: 
Assumption  No.  1:  Chargebacks  are  bad. 

One  of  the  most  toxic  and  widespread 
assumptions  in  many  otherwise  ratio¬ 
nal  IT  shops  is  the 
belief  that  installing  a 
chargeback  system 
for  the  true  cost  of  IT 
is  either  too  compli¬ 
cated  or  too  fraught 
with  political  peril  to 
be  undertaken. 
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The  dirty  little 
secret  of  IT  is  that 
every  CIO  has  a 
chargeback  system 
—  that  is,  he  knows 
what  resources  go  in 
and  what  outputs 
come  out.  But  is  the 
IT  leadership  team  comfortable  with 
sharing  that  information  with  the  rest 
of  the  enterprise? 

Running  an  IT  shop  while  keeping 
the  rest  of  the  organization  in  the  dark 
regarding  true  costs  and  trade-offs  is 
akin  to  Stalin  micromanaging  the  Sovi¬ 
et  economy.  On  paper,  maybe  it’s  a 
good  idea.  In  practice,  it’s  a  total  mess. 

The  ancient  Greeks  defined  idiot 
as  one  who  is  totally  self-contained. 
Technology  decision-making  can’t  be 
contained  inside  IT.  The  future  be¬ 
longs  to  enterprises  that  understand 
the  costs  and  trade-offs  underpinning 
their  technology  decisions. 

Assumption  No.  2:  End  users  want  to 
remain  ignorant  about  technology.  Many  IT 
leaders  (particularly  baby  boomers) 
believe  that  business-side  executives 
don’t  have  the  time  for  or  interest  in 
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learning  about  IT.  Remember:  Igno¬ 
rance  is  absence  of  awareness,  not 
absence  of  intellect. 

We  don’t  need  to  transform  business 
executives  into  technology  rock  stars. 
But  they  need  to  be  able  to  contribute 
to  technology  decision-making.  This  is 
the  true  art  of  next-generation  IT  lead¬ 
ership  —  figuring  out  what  the  suits 
need  to  know  and  then  designing  an 
effective  communication  strategy  to 
get  them  to  know  it.  Business-side 
leaders  need  to  develop  good  judg¬ 
ment  about  technology.  The  trick  is 
figuring  out  how  to  let  them  do  this 
without  learning  the  hard  way,  through 
failed  projects  or  missed  opportunities. 

Assumption  No.  3:  You  don’t  have  to  ag¬ 
gressively  manage  your  career.  Many  of  the 
people  I  most  admire  in  this  industry 
believe  it’s  enough  to  be  smart,  have 
reasonably  well-developed  social  and 
communication  skills,  and  be  knowl¬ 
edgeable  about  the  business.  And  this 
used  to  be  more  than  enough.  But  we 
now  live  in  an  age  when  people  are  aug¬ 
menting  natural  gifts  with  biomechani¬ 
cal  and  pharmacological  tools  and  using 
social  network/brand  building  and  so¬ 
cial  science  techniques  to  increase  in¬ 
fluence  and  performance.  In  the  future, 
you  are  going  to  have  to  be  better  than 
you!  This  takes  time  and  thought. 

Great  organizations  —  companies 
like  McDonald’s  under  the  brilliant 
stewardship  of  CIO  David  Weick  — 
recognize  that  high  performers  want  to 
realize  their  full  potential.  Such  com¬ 
panies,  which  include  Shell,  GE  and 
SAS  Institute,  help  their  people  man¬ 
age  their  careers  and  create  training 
and  executive  development  programs 
to  do  just  that.  ©  57578 
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Health  Care’s 
Sore  Need  for 
Standards 

I’M  IN  TOKYO  lecturing 
about  the  need  to  imple¬ 
ment  electronic  medical 

records  to  provide  safe,  effi¬ 
cient  and  coordinated  medical  care. 
Interestingly,  I  can  walk  into  any 
Japanese  post  office,  insert  my  ATM 
card  (issued  by  a  rural  New  England 
bank)  into  any  cash  machine  and  re¬ 
trieve  as  many  yen  as  I  need.  This  is 
made  possible  by  the  worldwide  adop¬ 
tion  of  electronic  standards  for  bank¬ 


ing  and  cash  transfers. 

However,  in  my  home¬ 
town  of  Boston,  my  medical 
records  can’t  be  electroni¬ 
cally  exchanged  between 
two  of  the  world’s  best 
teaching  hospitals,  even 
though  they’re  across  the 
street  from  each  other.  This 
is  because  there  hasn’t  been 
consistent  adoption  of  stan¬ 
dards  for  the  storage  and 
exchange  of  medical  infor¬ 
mation  in  the  U.S.  But 
there’s  hope. 

Health  and  Human  Ser¬ 
vices  Secretary  Michael 
Leavitt  has  established  the 
American  Health  Informa¬ 
tion  Community,  a  group  of 
17  government,  business  and 
nonprofit  leaders  charged 
with  fostering  adoption  of 
interoperable  electronic 
records  throughout  the  country.  Fur¬ 
ther,  the  HHS-based  Office  of  the 
National  Coordinator  for  Health  In¬ 
formation  Technology  has  funded  a 
$17.5  million  effort  to  accelerate  elec¬ 
tronic  medical  record  interoperability. 
This  effort  comprises  three  parts. 

The  first  is  to  harmonize  all  the  elec¬ 
tronic  standards  for  health  care  in  the 
U.S.  There  are  over  100  U.S.  organiza¬ 
tions  creating  standards.  These  stan¬ 
dards  are  at  times  redundant,  competi¬ 


tive  and  noninteroperable. 
To  achieve  the  kind  of  uni¬ 
versal  functionality  our 
ATM  cards  provide  world¬ 
wide,  U.S.  parties  must 
agree  on  a  common  set  of 
health  care  data  standards 
implemented  consistently 
by  hospitals,  clinician  of¬ 
fices  and  nursing  homes. 

The  second  step  is  to 
standardize  privacy  and  se¬ 
curity  policies  across  all  50 
states.  In  Massachusetts, 
doctors  can’t  retrieve  a 
complete  electronic  med¬ 
ical  list  from  an  insurance 
company,  even  with  patient 
consent,  if  a  medication  re¬ 
lated  to  mental  health,  sub¬ 
stance  abuse  or  HIV  treat¬ 
ment  is  present.  In  Ohio, 
doctors  must  use  a  crypto¬ 
graphic  electronic  signa¬ 
ture  to  prescribe  medications  electron¬ 
ically.  In  California,  only  paper  forms 
are  considered  a  valid  patient  consent. 
The  laws  that  created  many  of  these 
regulations  were  appropriate  30  years 
ago,  when  electronic  systems  lacked 
the  sophistication  available  today,  but 
now  they’re  an  impediment  to  deliver¬ 
ing  safe,  patient-focused  care. 

The  third  step  is  to  ensure  that  elec¬ 
tronic  medical  records  provide  the  ba¬ 
sic  functions  needed  for  a  doctor  to 


record  and  transmit  patient  medical 
information.  The  average  patient  over 
80  has  10  medications  and  three  clini¬ 
cians.  Rarely  is  there  any  coordination 
of  care  among  caregivers.  Objective 
criteria  to  certify  that  an  electronic 
records  system  meets  the  basic  re¬ 
quirements  for  data  capture  and  ex¬ 
change  are  essential. 

These  steps  are  a  great  start.  How¬ 
ever,  there’s  a  major  disconnect  in 
Washington.  President  Bush  has  stated 
that  every  clinician  should  be  using 
electronic  medical  records  within  10 
years.  The  U.S.  is  pursuing  this  goal 
with  $100  million.  The  U.K.  has  funded 
a  similar  effort  with  £6  billion.  It’s  esti¬ 
mated  that  the  U.S.  could  save  over 
$100  billion  yearly  by  using  interopera¬ 
ble  electronic  medical  records,  making 
the  return  on  investment  a  no-brainer. 

It’s  time  that  we  achieve  the  health 
care  equivalent  of  the  ATM  card.  If 
Japan  and  the  U.S.  can  coordinate  com¬ 
plex  currency  exchanges  between 
Japanese  post  offices  and  rural  U.S. 
banks,  we  should  be  able  to  send  elec¬ 
tronic  medical  records  across  the 
street.  Now  is  the  time  to  make  the 
investment.  Your  health  depends  on 
it.  ©  57496 
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Was  HP’s  Response  to  Katrina  Timely? 


I  DISAGREE  WITH  Don  Tennant 
[“Has  HP  Forgotten?”  QuickLink 
56550].  The  first  reports  after  Hur¬ 
ricane  Katrina  hit  said  New  Orleans 
hadn’t  suffered  serious  damage. 
Only  after  the  levee  broke  was  the 
city  in  serious  trouble.  If  HP  had 
canceled  its  conference  in  New  Or¬ 
leans  the  day  after  the  hurricane 
and  there  had  been  no  subsequent 
levee  break,  the  economic  damage 
for  the  city  would  have  been  severe. 
I  wonder  what  Tennant  would  have 
written  in  that  case. 

Markus  Miklas 
Product  manager, 

UC4  Software,  Vienna, 
markus@miklas.at 

(ENJOYED  HOW  Tennant  lit  into 
HP  over  its  wobbling  over  New 
Orleans.  It’s  interesting  that  both 
HP  and  federal/state  leadership 
were  apparently  clueless  about  the 
conditions  in  New  Orleans. 


G.W.  Bush  has  made  it  clear  that 
he  doesn't  watch  TV  news  or  read 
newspapers.  Unfortunately  for  the 
victims  of  this  tragedy,  that  behavior 
apparently  was  emulated  at  FEMA 
and  the  DHS,  where  no  one  was 
watching,  or  wanted  to  admit  to 
watching,  the  news.  That  would 
explain  statements  like  former 
FEMA  chief  Michael  Brown’s  “The 
federal  government  only  received 
factual  confirmation  of  the  disaster 
on  Thursday,"  implying  that  live 
broadcasts  from  the  disaster  aren’t 
factual. 

I’m  convinced  the  top  brass  at 
HP  felt  the  same  way  about  those 
journalists  who  “sensationalize  for 
effect.”  Eventually,  that  stubborn 
avoidance  of  any  bad  news  trickled 
down  to  the  rest  of  the  leadership 
team  and  finally  popped  up  in  the 
internal  HP  e-mail  Tennant  quoted, 
which  seemed  blissfully  unaware 
that  New  Orleans  was  destroyed. 


Tennant’s  column  did  show, 
though,  that  HP  responded  quicker 
than  the  federal  and  state  leaders; 
I'll  give  them  that. 

Mark  Holt 

IT  services  manager, 
Richmond,  Va. 


Let  Virus  Writers 
Shoot  It  Out 

WHAT  l  READ  in  the  article 
“Computer  Virus  Writers  at 
War,  Security  Firm  Says"  [QuickLink 
56271]  makes  sense  if  these  are 
data  thieves  writing  the  viruses  in¬ 
stead  of  “joy  riders."  If  you're  trying 
to  steal  someone's  identity  or  credit 
card  numbers,  you  don’t  want 
someone  else  using  them  and  set¬ 
ting  off  alarms  just  as  you  make  your 
first  attempt.  And  if  you’re  selling 
the  data,  you  don’t  want  your  cus¬ 
tomers  complaining  that  they  got 
70%  of  the  same  data  from  some¬ 
one  else  earlier  in  the  day.  It’s 


possible  that  we  may  start  to  see 
virus  writers  reporting  exploits  and 
virus  signatures  used  by  their  com¬ 
petitors. 

Unfortunately,  they’ll  probably 
realize  that  this  is  like  starting  a 
gunfight  and  having  each  side  call¬ 
ing  the  cops  to  arrest  the  others. 
But  we  can  dream. 

David  Lathrop 
Data  architect, 

Olympia,  Wash. 
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With  Sybase®  software,  BNSF  Railway  Company  developed  a  mobile  application 
that  enables  remote  workers  to  document  railway  maintenance  and: 

Cuts  data  entry  time  by  approximately  50  percent 
0^ Provides  more  accurate  and  timely  data 
Q^Delivers  software  and  database  updates  automatically 


For  most  organizations,  maintaining  32,500  miles  of  rail  lines  would  be  a  colossal  headache.  But  for  BNSF  Railway  Company,  it  has  become  a 
competitive  advantage.  Because  they  have  an  information  edge  that  comes  from  Sybase  SOL  Anywhere®  and  Adaptive  Server®  Anywhere  software. 
Now,  BNSF  remote  workers  can  input  data  on  location  (vs.  waiting  until  the  end  of  the  day).  FJeadquarters  has  more  visibility  into  the  field.  And 
maintenance  decisions  are  made  more  proactively.  Just  a  few  reasons  why  more  and  more  global  companies  are  using  Sybase  every  day  to  keep 
their  business  on  track,  www.sybase.com/infoedge22 
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HANDS  ON  REVIEWS 

Disk  Defragmenters 
Demystified 

Disk  defragmentation  tools  offer 
a  trade-off  between  thoroughness 
and  speed.  Russell  Kay  reviews 
two  defragmentation  utilities. 

Page  29 


SECURITY  MANAGER’S  JOURNAL 

Bottom-Up  Infosec 
Trumps  Top-Down 

The  higher-ups  ask  C.J.  Kelly  for  an 
information  security  plan  on  paper, 
and  she  finds  that  her  bottom-up 
approach  covers  more  of  the  bases 
than  this  top-down  effort.  Page  34 


FUTURE  WATCH 

Shrinking  Degrees 
Of  Separation 

Jon  Kleinberg,  who  has  been  awarded  a 
MacArthur  “genius”  grant  for  his  work 
on  computer  and  social  networking, 
answers  some  questions  about  new 
search  technologies.  Page  36 


AtaGlance 


Wide-Area  File  Services 

WHAT  ARE  THEY?  Appliances  or  software  that  allow 
centralization  of  file  services  by  optimizing  connectivity 
to  remote-office  clients  over  a  wide-area  network.  WAFS 
systems  overcome  bandwidth  and  latency  limitations 
through  a  combination  of  caching,  protocol  optimization, 
compression  and  other  techniques. 

PROS:  Branch-office  file  servers  can  be  consolidated  into 
the  data  center,  where  servers  and  data  can  be  managed 
and  protected  more  effectively. 

CONS:  The  convergence  of  WAFS  and  WAN  acceleration 
technologies  and  the  entry  of  large  players  such  as  Cisco  are 
changing  the  market  rapidly. 


Wide-area  file  services  allow  centralized  consolidation  of  file  services  while  delivering  branch  offices 
responsiveness  levels  approaching  that  of  local  file  servers.  By  Robert  L.  Mitchell 


EMERGING^ 

TECHNOLOGIES 


Data  center 


Anyone  who  has  ever  made  a  call  overseas  has  expe¬ 
rienced  latency,  that  pregnant  pause  that  takes  place 
after  you’ve  finished  speaking  and  before  you  hear  a 
response.  That  short  delay  of 
perhaps  300  milliseconds  can 
make  long-distance  conversa¬ 
tions  a  bit  stilted,  but  it’s 
downright  irritating  for  com¬ 
puter  users,  who  must  wait  for  hundreds  —  or  thou¬ 
sands  —  of  computer-to-computer  conversations  to 
be  completed  before  a  file  can  be  saved 
or  accessed.  That,  along  with  the  rela¬ 
tively  low  bandwidth  of  WAN  links,  is 
why  most  remote  offices  still  have  local 
file  servers. 

Now  that  last  bastion  of  remote- 
office  computing  is  beginning  to  fall 
as  companies  adopt  emerging  wide- 
area  file  services  (WAFS)  technol¬ 
ogies  in  a  bid  to  consolidate  file 
services  back  at  the  data  center. 

Computer  Sciences  Corp.  recently 
took  that  path  as  it  consolidated  IT 
equipment  in  23  branch  offices  into  its 
headquarters  in  El  Segundo,  Calif. 


Before  CSC  turned  to  WAFS  technology,  the  proj¬ 
ect  was  succeeding  in  all  areas  —  except  one.  The 
systems  integrator  had  been  able  to  replace  local 
Microsoft  Exchange  e-mail  servers  with  Web  clients 
and  move  services  such  as  the  Dynamic  Host  Config¬ 
uration  Protocol  (DHCP)  and  Domain  Name  System 
(DNS)  back  into  the  data  center,  but  the  initiative 
stalled  when  it  came  time  to  consolidate  local  file 
servers. 

“We  discovered  that  the  file  services  protocol  is 
not  tolerant  of  low-bandwidth,  high- 
latency  connections,”  says  Brian 
Laska,  technical  architect  in 


CSC’s  consulting  group.  Most  offices  were  limited  to 
1.44Mbit/sec.  T1  speeds,  and  latency  was  particularly 
acute  for  the  most  distant  offices.  “So  we  scrapped 
the  idea,”  Laska  says. 

Then  he  came  across  WAFS  technology.  Start-up 
Actona  Technologies  (now  owned  by  Cisco  Systems 
Inc.)  offered  a  set  of  appli¬ 
ances  that  optimize  file 
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A  WIDE-AREA  FILE  SERVICES  APPLIANCE  or  server  running  WAFS  software  caches  data  locally  and  only  the 
portions  of  cached  files  that  have  changed  across  the  WAN.  Data  that  must  pass  over  the  wire  is  compressed,  and  the  file-sharing  protocol  is  optimized  to  reduce  overhead. 
This  reduces  latency  and  optimizes  throughput,  enabling  data  to  be  consolidated  in  the  data  center,  where  it  can  be  centrally  backed  up  and  administered. 
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remote  offices.  The  device  establishes  a  local  file 
cache  to  keep  frequently  accessed  data  off  the  WAN. 
It  also  compresses  data  and  optimizes  the  chatty 
Common  Internet  File  System  (CIFS)  file-sharing 
protocol  that  CSC’s  Windows  file  servers  use.  Once  a 
file  resides  in  cache,  only  parts  of  the  file  that  have 
changed  are  transmitted  over  the  WAN. 

After  a  period  of  testing,  Laska  rolled  out  the  prod¬ 
ucts  in  its  data  center  and  19  branch  offices  last  April. 
The  change  was  transparent  to  end  users,  who  were 
redirected  to  the  new  devices  by  way  of  a  log-in 
script  change.  “We  took  29  servers  and  cut  them 


Optimization  on  the  Fast  Track 


Gartner  predicts  that  end-user  spending  on  WAN 
optimization  controllers,  a  Gartner  category  that 
includes  WAFS  and  WAN  optimization  products,  will 
surpass  $1  billion  by  2006: 


2004 

2005* 

2006* 


S479M 

S704M 

£p 

S1.193B 

*  Projected 


SOURCE:  GARTNER  DATAQUEST  INC.,  MAY  2005 


I  KnowYourWAFS 

I  FromYourWADS 

Wide-area  file  services  are  part  of  a 
broader  category  called  wide-area  data 
services.  Here’s  what  each  entails. 

WAFS 

WIDE-AREA  FILE  SERVICES  attempt  to 
provide  access  to  files  over  a  WAN  as 
quickly  as  if  they  were  stored  locally.  To 
do  this,  WAFS  products  must  reduce  la¬ 
tency  and  optimize  the  use  of  limited 
bandwidth.  Products  typically  use  a 
I  combination  of  local  caching,  data  com- 
|  pression  and  optimization  of  higher  level 
|  protocols  such  as  CIFS  to  minimize  the 
number  of  message  exchanges  required 
|  to  open  or  save  a  fife. 


WADS 

|  WIDE-AREA  DATA  SERVICES  describes 
the  convergence  of  WAFS  and  WAN  opti¬ 
mization  techniques  to  solve  the  problem 
of  providing  remote  access  to  a  wide  va- 

l  riety  of  centrally  located  IT  resources 
over  a  WAN.  Gartner  refers  to  this  cate¬ 
gory  as  WAN  optimization  controllers 
(see  chart  above). 


down  to  two,”  Laska  says.  While  the  cost  of  the  appli¬ 
ances  versus  buying  new  file  servers  was  “a  wash,” 
he  expects  the  system  to  pay  for  itself  in  two  years. 
“We  don’t  have  to  back  up  [local  file  servers],  main¬ 
tain  them  or  get  support  contracts  for  them.  It’s  just 
routers  and  switches  left,”  he  says,  adding  that  elimi¬ 
nating  branch-office  backups  cut  off-site  tape-vaulting 
costs  by  83%. 

From  Niche  to  Mainstream 

WAFS  technology  began  to  appear  over  the  past  two 
to  three  years,  initially  gaining  a  foothold  in  financial 
services,  engineering  and  legal  markets. 

“What  you  have  is  a  whole  range  of  early  adopters 
who  have  some  profound  business  issue  that  rational¬ 
izes  this  kind  of  technology,”  says  Brad  O’Neill,  an  an¬ 
alyst  at  Taneja  Group  Inc.  in  Hopkinton,  Mass.  These 
users  often  had  a  critical  need  for  fast,  shared  access 
to  files  such  as  legal  or  engineering  documents  to 
collaborate  with  employees  in  distant  offices. 

Now  adoption  of  WAFS  technology  is  broadening. 
The  market,  measured  in  tens  of  millions  of  dollars 
today,  doubled  in  the  past  12  months  and  will  grow 
150%  to  200%  in  the  next  year,  according  to  Taneja 
Group.  Consolidation  and  regulatory  compliance 
needs  are  driving  that  growth. 

CSC  and  other  organizations  now  view  the  technol¬ 
ogy  as  a  way  to  simplify  the  IT  infrastructure  by  mov¬ 
ing  servers  and  data  back  into  the  data  center,  where 
IT  can  more  easily  administer  them  and  back  up  and 
protect  the  data.  That’s  particularly  important  for 
businesses  that  must  comply  with  regulations  such 
as  the  Sarbanes-Oxley  Act,  says  O’Neill.  With  branch- 
office  data  centralized,  all  corporate  data  can  be  more 
quickly  and  reliably  presented  in  response  to  an  audit. 

At  CW  Capital  Investments  LLC,  collaboration  is¬ 
sues  drove  the  adoption  of  WAFS.  Files  such  as  loan 
applications  needed  to  be  shared  among  offices  dur¬ 
ing  processing.  “We  do  securitized  loans  with  larger 
banks.  To  wait  even  a  few  minutes  for  a  file  can  be  a 
problem,”  says  Vern  Butler,  chief  technology  officer 
at  the  Needham,  Mass.-based  lending  institution.  But 
with  average  file  sizes  of  10MB  to  20MB,  opening  or 
saving  a  file  over  the  WAN  was  taking  up  to  10  min¬ 
utes.  “There  was  an  outcry  from  the  offices  to  get 
faster  response  times,”  Butler  says. 

Using  e-mail  to  route  files  was  too  slow  and  affect¬ 
ed  workflow  because  multiple  users  needed  to  inter¬ 
act  with  the  same  files  and  have  quick  access  to 
them.  “If  I  have  to  wait  for  an  underwriter  to  go 
through  the  entire  process  before  I  can  make  a  few 
small  changes,  that  takes  a  week  or  two,”  Butler  says. 
Software  from  Availl  Inc.  and  other  business  process 
improvements  helped  shorten  loan  turnaround  times 
from  a  month  to  one  week  or  less. 

AvailPs  product  takes  a  different  approach  from 
conventional  WAFS  devices:  Instead  of  using  a 
cache,  Availl’s  software,  which  runs  on  a  Windows 
server,  fully  replicates  more  than  125GB  of  data  be¬ 
tween  locations.  It  keeps  the  copies  synchronized 
by  updating  only  the  portion  of  each  file  that  has 
changed  when  files  are  saved. 

Bidirectional  replication  was  important,  says 
Butler,  because  users  needed  access  to  files  even  if 
WAN  connectivity  failed.  The  system  creates  real¬ 
time  backups  that  are  always  up  to  date,  and  CW 
Capital  uses  the  system  to  maintain  backups  at  a  fail- 


H  We  took  29  servers  and 
cut  them  down  to  two 
[by  using  WAFS  appliances]. 


BRIAN  LASKA,  technical  architect, 

CSC’s  consulting  group 


over  site  maintained  by  SunGard  Data  Systems  Inc. 

As  with  many  other  WAFS  devices,  however,  file 
locking  is  coordinated  from  the  central  site.  If  WAN 
connectivity  goes  down  and  two  remote  offices 
change  the  same  file  locally,  the  version  inconsisten¬ 
cies  must  be  resolved  manually  on  the  back  end. 

Converging  Technologies 

WAFS  products  have  focused  on  application-specific 
optimizations  such  as  CIFS  acceleration,  but  as  the 
devices  have  gained  in  popularity,  they’ve  begun  to 
merge  with  lower-level  WAN-optimization  technol¬ 
ogies.  The  converged  offerings,  dubbed  wide-area 
data  services,  provide  a  top-to-bottom  approach 
to  optimizing  remote-office  access.  Gartner  Inc., 
which  refers  to  the  category  as  WAN  optimization 
controllers,  expects  spending  to  grow  nearly  70%  to 
$1.19  billion  next  year  (see  chart  at  left). 

Cisco  jump-started  the  convergence  process  when 
it  acquired  Actona  last  year  and  integrated  the  ven¬ 
dor’s  product  into  its  converged  Wide  Area  Applica¬ 
tion  Engine  architecture.  DiskSites  Inc.  is  now  cross¬ 
selling  a  WAFS  product  alongside  Expand  Networks 
Inc.’s  WAN  optimization  offering.  Riverbed  Technol¬ 
ogy  Inc.  offers  its  own  converged  product.  Instead  of 
caching  or  replicating  files,  it  chops  up  TCP  traffic 
into  100-byte  segments  that  it  labels  and  stores  in  a 
local  cache.  When  a  file  request  is  made,  it  intercepts 
the  response  and  returns  only  the  segments  of  data 
that  aren’t  in  cache.  By  using  this  approach,  the  com¬ 
pany  says  it  can  accelerate  any  application,  not  just 
file  services. 

That  approach  made  sense  to  Walter  Curd,  director 
of  IT  at  Marvell  Semiconductor  Inc.  in  Sunnyvale, 
Calif.  Eighty  percent  of  the  $1.5  billion  semiconduc¬ 
tor  designer’s  employees  are  engineers,  and  many 
need  to  share  large  files.  With  12  offices  scattered 
across  the  globe,  latency  was  a  big  problem. 

Curd  considered  a  WAFS  product  from  Tacit  Net¬ 
works  Inc.  but  says  he  wanted  something  that  would 
also  accelerate  access  to  other  applications,  such  as 
e-mail  and  an  intranet  site.  (Tacit  does  offer  a  prod¬ 
uct  for  Exchange  that  optimizes  transfers  of  file 
attachments.) 

In  several  new  branch  offices  Marvell  has  opened, 
the  company  has  avoided  installation  of  local  servers. 
“Now  we  don’t  have  to  put  in  an  e-mail  server  in 
every  location,”  Curd  says.  As  for  remote  access  to 
file  shares,  “it’s  not  quite  as  fast  as  being  here,  but  the 
response  is  quite  nice,”  he  says.  Backups  are  also  now 
handled  centrally. 

Curd  says  Marvell  was  careful  to  configure  the 
appliance  to  exclude  voice-over-IP  and  videoconfer¬ 
encing  traffic.  “Otherwise  it  will  compress  all  of  the 
data,”  which  would  affect  quality  of  service,  he  says. 

Most  of  the  system’s  benefits  are  hard  to  quantify. 
“There  wasn’t  a  huge  ROI,”  Curd  says,  except  in  a 

Continued  on  page  25 
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“NOBODY  ELSE  OFFERED  A  SOLUTION  THAT  ALLOWED  US  TO  LEVERAGE 
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Bob  Travatello 
CIO,  Blue  Rhino 

Blue  Rhino  is  a  midsize  company  that  had  a  king-sized  problem.  As  the  #1  brand  in  propane  tank 
exchange,  their  information  storage  needs  were  growing  at  100  percent  a  year.  But  their  IT  budget  wasn’t. 
They  chose  an  EMC  solution  that  gave  them  less  downtime,  faster  backups,  and  quicker  recovery  times. 
The  entire  package,  hardware  and  software,  delivered  a  high  degree  of  flexibility  at  an  affordable  price 
and  allowed  them  to  keep  their  focus  on  their  customers.  Talk  to  your  EMC  Velocity  ’  Partner  to  learn  more 
about  EMC  solutions  that  start  simple  and  stay  simple. 

Read  the  Blue  Rhino  profile  at  www.EMC.com/BlueRhino,  or  call  866-796-6369  to  learn  more. 
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few  new  offices  where  he  avoided  buying  new 
servers.  Productivity  gains  were  equally  elusive  to 
measure.  “How  do  you  quantify  faster  file  transfers 
for  25  people?”  he  asks. 

Transitional  State 

Although  WAFS  devices  have  been  around  for  a  few 
years,  the  technology  is  still  relatively  new  and  is 
evolving  rapidly.  “Vendors  are  constantly  updating 
what  they  have,”  says  Simon  Robinson,  an  analyst  at 
The  451  Group  in  New  York.  Although  smaller  ven¬ 
dors  still  dominate  the  market,  that’s  changing  as 
products  converge  with  WAN  optimization  tech¬ 
nologies  and  networking  vendors  consider  adding 
the  capabilities  to  their  switching  products.  Acquisi¬ 
tions  and  alliances  are  quickly  changing  the  market, 
which  adds  an  element  of  uncertainty  for  buyers. 

CSC’s  WAFS  deployment  had  to  be  delayed  while 
Cisco  completed  its  acquisition  of  Actona.  “They  had 
to  go  through  their  whole  branding,”  Laska  says, 
which  left  CSC  in  the  lurch.  “The  whole  timing  of  the 
merger,  that  really  strained  [the  relationship].” 

The  systems  also  aren’t  cheaper  than  using  file 
servers.  Prices  start  at  $10,000  to  equip  the  data  cen¬ 
ter,  plus  $5,000  per  branch,  and  a  typical  installation 


can  go  much  higher.  But  for  organizations  with  many 
branch  offices,  where  the  frustration  of  supporting 
file  servers  and  data  from  afar  is  compounded,  the 


price  of  admission  will  seem  small  indeed  if  it 
means  ditching  remote  file  servers  once  and  for  all. 

C  56664 


WAFS  vendors  have  come  up  with  different  approaches 
to  providing  remote  access  to  file  services.  Not  all  use 
caching,  for  example.  Here’s  how  a  few  compare. 

Tacit  Networks  in  South  Plainfield,  N.J.,  offers  a 
caching  hardware  appliance  that  uses  a  distributed  file  sys¬ 
tem.  “Without  [a  DFS],  you  can't  ensure  100%  integrity  for 
data,"  says  President  Chuck  Foley.  DiskSites’ software  is 
similar,  but  it  includes  embedded  Linux  and  runs  on  the 
user's  hardware.  The  Potomac,  Md.-based  vendor  says  its 
software  will  run  as  a  VMware  virtual  server  in  the  data  cen¬ 
ter  and  can  support  print,  DNS  and  DHCP  services.  Cisco 
Systems  acquired  WAFS  vendor  Actona  last  year  and  now 
offers  a  converged  line  of  products  called  Wide  Area  Appli¬ 
cation  Engines  that  have  WAFS  File  Engine  Content  Engine 
modules. 

Riverbed  Technology  offers  WAFS-like  capabilities  but 
slices  up  and  caches  segments  of  data  embedded  in  TCP  traf¬ 
fic  instead  of  caching  individual  files.  When  a  file  is  request¬ 


ed,  it  intercepts  the  data  the  file  server  returns  and  transfers 
only  the  data  that  doesn’t  exist  in  the  local  appliance. 

Riverbed  doesn’t  like  to  call  it  a  cache.  “It’s  a  disk-based, 
double-ended  TCP  proxy  product,”  says  Alan  Saldich,  vice 
president  of  product  marketing.  Riverbed’s  technique  allows 
the  appliance  to  service  any  remote-office  applications,  not 
just  file  services.  But  the  in-line  appliance  also  must  inter¬ 
cept  all  TCP  traffic  rather  than  just  those  for  file  requests. 

Availl  in  Andover,  Mass.,  offers  software  that  does  full 
bidirectional  replication  rather  than  using  a  cache.  The  ap¬ 
plication  runs  on  a  Windows  server.  The  vendor  argues  that 
this  method  provides  continuously  updated  backup  be¬ 
tween  sites  and  allows  full  access  to  all  data,  even  when  a 
WAN  connection  goes  down.  “We  move  data  at  the  best 
possible  time  -  when  you  save  it.  The  worst  time  to  move  it 
is  when  you  want  it,”  says  Craig  Randall,  vice  president  of 
operations  at  Availl. 

-  Robert  L.  Mitchell 
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Whether  you  need  fast  backup  and  complete  protection  or  scalable  and  easy-to-manage  storage  consolidation  for 
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Taking  the  Pain  Online 


Percentage 
of  online 
households 
that  pay 
bills  online 


Actual 


31% 


20%  I 
12%  ■ 

■  I 


Forecast 


52% 


2000  2002  2004  2006  2008  2010 


Over  half  of  U.S.  households  connected  to  the  Inter¬ 
net  will  pay  their  bills  online  by  2010,  according  to 
Forrester  Research  Inc.  The  firm  predicts  that  52°/o 
of  the  estimated  90.7  million  households  projected 
to  be  on  the  Net  in  five  years  will  have  given  up  on 
checks,  envelopes  and  stamps  for  bill-paying.  Those 
numbers  translate  into  a  75%  increase  over  the 
number  of  households  that  currently  pay  bills  online. 

SOURCE:  FORRESTER  RESEARCH  INC  .  CAMBRIDGE.  MASS 


DIFFERENCE  ENGINES 


Thanks  for 
The  Memory 

IN  1946,  Frederick  Williams, 
with  the  assistance  of  col¬ 
league  Tom  Kilbu  rn,  devel¬ 
oped  the  random  access 
memory  device.  At  the  time. 
w  w  Williams  was  chairman  of 

electrotechnics  at  Manchester  University  in 
England,  where  the  two  men  experimented  on 
cathode  ray  tubes  as  a  medium  for  informa¬ 
tion  storage.  Their  research  led  to  the  inven¬ 
tion  of  the  Williams  Tube  (later  more  accurate¬ 
ly  called  the  Wiliiams-Kilburn  Tube),  which  ex- 
ploited  the  persistence  of  images  of  dots  on 
the  tube's  phosphor 
screen  to  store  data. 

When  a  dot  is  drawn 
on  a  CRT,  the  spot  lasts 
for  a  certain  amount  of 
time  that  depends  on  the 
type  of  phosphoi  used  in 
the  tube.  A  s  de  effect  is 


The  Williams-Kilbum  Tube 


that  the  electrical  charge  in  the  area  around 
this  dot  is  changed  slightly.  By  measuring  the 
charge  at  that  spot,  the  researchers  created  a 
simple,  form  of  memory  that  lasted  for  a  certain 
period  of  time  based  on  the  type  of  phosphor 
used.  Because  the  charge  gradually  leaked 
off,  it  was  necessary  to  scan  the  tube  periodi¬ 
cally  and  rewrite  every  dot  (similar  to  the  re¬ 
fresh  cycles  of  DRAM  in  modern  systems). 

In  1948,  Kilburn  and  Williams,  assisted  by 
another  researcher,  Geoff  Tootill,  designed 
and  built  a  prototype  machine  based  on  the 
CRT  storage  device.  Nicknamed  “The  Baby.” 
the  new  computer  demonstrated  the  ability  of 
the  Williams  Tube.  For  the  first  time  in  history, 
a  computer  used  a  stored  program.  Kilburn 
wrote  that  ground-breaking  17-line  program  to 
calculate  the  highest  fac¬ 
tor  of  a  number,,  and  it 
was  first  executed  on 
June  21. 1948.  In  1976, 
Wiliiaffls  was  knighted 
for  his  "distinguished 
contributions  to  modern 
technology,* 


Virtual  Mirror 
On  the  Wall 

RESEARCHERS  HAVE  LONG  KNOWN  that 
mimicking  another  person  elicits  positive  inten¬ 
tions  and  emotions  in  the  mimickee.  Now,  a 
study  by  Stanford  University  researchers  pub¬ 
lished  in  the  October  issue  of  Psychological 
Sc/eoce  indicates  that  we  find  being  mimicked 
by  artificial  intelligence  just 
as  persuasive  and  likable  as 
being  mimicked  by  humans. 

Participants  in  the  study 
listened  to  an  argument 
given  by  an  artificial  agent 
that  either  mimicked  the  lis¬ 
teners'  head  movements  or 
repeated  the  movements  of 
another  participant.  Listen¬ 
ers  who  were  mimicked  viewed  agents  as  more 
likable  than  did  those  who  listened  to  agents 
that  didn’t  mimic  them. 

“In  addition,  participants  interacting  with 
mimicking  agents  on  average  didn't  turn  their 
heads  such  that  the  agent  was  outside  of  their 
view,”  wrote  professor  Jeremy  N.  Bailenson 
and  Stanford  doctoral  candidate  Nick  Yee.  The 
researchers  also  found  that  although  partici¬ 
pants  knew  a  nonhuman  agent  was  speaking 
to  them,  most  didn't  notice  the  mimicry. 

The  artificial  agents  consisted  of  a  head  and 


shoulders  and  came  in  both  male  and  female 
versions.  They  mimicked  the  pitch,  yaw  and  roll 
of  the  participants'  head  movements  and  blinked 
randomly  (according  to  an  algorithm  based  on 
human  blinking)  and  exhibited  lip  movements 
driven  by  the  amplitude  of  the  recorded  mes¬ 
sage.  Along  with  discovering  that  being  mimic¬ 
ked  by  a  computer  is  as  persuasive  as  being 
mimicked  by  a  person,  the  researchers  saw  a 
glimpse  of  what  technology  has  in  store. 

“Anyone  who  releases  a 
digital  representation  of 
themselves  to  the  outside 
world  -  by  posting  a  digital 
photograph,  by  leaving  a 
cell  phone  recording  of 
their  voice. .  .is  leaving  a 
footprint  of  their  identity 
that  can  be  subtly  ab¬ 
sorbed  by  people  with  both 
good  and  bad  intentions,"  Bailenson  wrote 
Bailenson  is  an  assistant  professor  in  the 
Department  of  Communications  at  Stanford. 
Elis  main  area  of  interest  is  the  phenomenon  of 
digital  human  representation,  especially  in  the 
context  of  immersive  virtual  reality.  He  explores 
the  manner  in  which  people  are  able  to  repre¬ 
sent  themselves  when  the  physical  constraints 
of  the  human  body  and  realistically  rendered 
behaviors  are  removed.  ©  57285 
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Now  is  the  time  to  upgrade  to  VoIP  handsets  and  conference 
phones  from  Polycom.  Our  award-winning  VoIP  solutions  make  the 
transition  to  the  world  of  IP  easier  than  ever.  To  learn  more  about 
the  phones  of  the  future,  visit  polycom.com/experience 
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The  shortest 

route  to  long-term 

solutions. 

As  a  Forrester  Executive  Council  member,  you'll  benefit  from  interacting  with  a 
unique  group  of  peers  who  provide  a  sounding  board  for  your  critical  decision¬ 
making.  You'll  have  access  to  your  own  Forrester  advisory  team  that  leverages 
the  expertise  of  more  than  200  Forrester  research  professionals.  Together,  this 
collective  will  advance  your  personal  and  corporate  knowledge,  support  and  validate 
your  IT  initiatives  and  decisions,  and  help  you  find  the  right  solutions  faster. 


Security  &  Risk  Management  council  Enterprise  Architecture  council 

This  Council  helps  members  distinguish  Join  this  Council,  and  you'll  learn  how  to 
between  taking  technical  measures  and  craft  effective  architecture  governance 
implementing  major  network  architecture  processes  to  make  autonomous  units  act 
enhancements  to  manage  genuine  risk,  in  concert  and  develop  a  framework  for 
cut  costs,  and  improve  service.  delivering  balanced  IT  services. 


Forrester  Executive  Council  members  have  access  to  our  more  than  20  years  of 
industry-specific  research  expertise.  To  become  a  member  of  an  exclusive  club 
you  abreast  of  major  trends,  technology  shifts,  and  best  practices, 
n:  mkasparian@forrester.com.  Or  visit  us  online. 
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.  Demystified  . 


These  disk  defragmentation  tools  present  a  trade-off 
between  thoroughness  and  time  required  to  run  the 
programs.  Both  approaches  can  be  effective. 


Most  people  think  of 

disk  defragmentation  as 
a  process  that  involves 
gathering  and  reorder¬ 
ing  pieces  of  data  files 
that  have  been  scattered 
on  a  hard  drive.  The  fragments  are 
moved  around,  like  the  pieces  in  a 
shell  game,  so  that  each  file  occupies  a 
unified,  contiguous  chunk  of  real  es¬ 
tate  on  the  hard  drive.  The  process,  a 
little  like  putting  together  a  jigsaw 
puzzle,  speeds  up  disk  performance  by 
allowing  the  drive’s  heads  to  read  an 
entire  file  without  having  to  jump  back 
to  the  drive  index  for  more  lookups. 

That  process  is  called  physical 
defragmentation.  However,  no  disk 
utility  on  the  market  does  that.  In¬ 


stead,  the  tools  reviewed  here  —  Per- 
fectDisk  7,  Diskeeper  9  and  the  Disk 
Defragmenter  utility  included  with 
Windows  XP  —  all  defragment  logical 
hard  drives  (or  volumes)  created  by 
the  operating  system’s  file  system. 

These  utilities  perform  a  similar  op¬ 
eration  at  the  volume  level.  They  also 
improve  performance  by  positioning 
files  at  specific  locations  within  the  di¬ 
rectory  in  order  to  speed  up  tasks  such 
as  booting  and  directory  access.  But 
it’s  only  after  the  defragmentation  util¬ 
ity  has  completed  a  pass  on  the  logical 
volume  that  the  disk  drive  subsystem 
(whether  Fibre  Channel,  iSCSI,  ATA  or 
Serial  ATA)  uses  that  information  to 
organize  data  stored  on  the  physical 
disk  platters. 


■SIS 


PerfectDisk  7 


At  a  Glance 

Diskeeper’s  full-screen  graphical  map  of  disk  usage  (left)  was  easier  to  read  than  that  of 
PerfectDisk  (right).  However,  PerfectDisk  generated  more  detailed  reports. 


— 
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Diskeeper 


www.diskeeper.com/defrag.asp 


Price:  Professional  Edition  is  S49.50 
Server  Standard  Edition  starts  at  S249.95; 
Server  Enterprise  Edition  starts  at  $999. 


. 

1 

Raxco  Software  Inc., 

Gaithersburg,  Md. 

Price:  PerfectDisk  Workstation  is  $39.95; 
PerfectDisk  Server  costs  S239.95. 


The  problem  of  disk  defragmenta¬ 
tion  has  been  muted  somewhat  by  the 
evolution  of  the  Windows  file  system. 
Both  the  desktop  and  server  versions 
of  Windows  use  NT  File  System.  Be¬ 
cause  NTFS  volumes  are  indexed  by  a 
master  file  table  distributed  across  the 
drive,  they  derive  less  benefit  from  de- 
fragmentation  than  NTFS’s  predeces¬ 
sor,  FAT-32.  However,  defragmenters 
still  improve  performance,  especially 
for  machines  that  multitask. 

Also,  while  both  PCs  and  servers 
with  direct-attached  storage  can  bene¬ 


fit  from  defragmentation,  the  process 
is  less  useful  for  storage  arrays,  which 
split  data  over  multiple  disks  and  use 
different  principles  for  organizing  data 
storage  (see  the  QuickStudy  on  RAID, 
QuickLink  a7330). 

Difference  of  Opinion 

Raxco  Software  Inc.  in  Gaithersburg, 
Md.,  and  Diskeeper  Corp.  in  Burbank, 
Calif.,  have  very  different  views  of 
storage  optimization.  Diskeeper,  the 
800-pound  gorilla  in  the  market,  adver- 
Continued  on  page  31 
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The  real  world  operates  in  real  time  —  so  should  your  conference 
technology.  For  fast,  easy,  and  intuitive  collaboration,  look  to 
Polycom  for  solutions.  To  learn  more  about  our  real-time  offerings, 

immediately  visit  polycom.com/experience 
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Join  a 
risk- reduction 
program 

As  a  member  of  a  Forrester  Executive  Council,  you'll  have  your  own  personal 
advisory  team  to  help  you  make  the  right  IT  and  business  decisions.  They'll 
leverage  the  expertise  of  more  than  200  Forrester  research  professionals  to 
increase  your  corporate  knowledge,  support  and  validate  your  IT  initiatives  and 
decisions,  and  reduce  your  risk.  You’ll  also  benefit  from  interacting  with 
a  unique  group  of  peers. 


Application  Development  Council  IT  Operations  Management  Council 

At  this  Council,  we’ll  show  you  how  to  This  Council  focuses  on  operations 
re-evaluate  design  and  development  management  best  practices,  systems 
processes,  tools,  architecture,  and  management  tools,  workload 
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Continued  from  page  29 
tises  ease  of  use  and  the  simplicity  of 
remote,  network-based  administration. 
It  advocates  automated,  daily  defrag¬ 
mentation  as  standard  maintenance. 

Raxco  claims  that  its  PerfectDisk 
does  a  more  thorough  job  in  a  single 
pass,  can  operate  on  disks  with  less 
free  space  and  offers  powerful  analysis 
tools.  Indeed,  our  tests  show  that 
Diskeeper  does  run  faster,  making 
daily  use  less  cumbersome,  while 
PerfectDisk  is  more  thorough. 

Raxco  also  touts  PerfectDisk’s  ability 
to  defragment  all  free  space  as  well  as 
areas  containing  data.  Free  space  on  a 
disk  gets  fragmented  over  time,  just  as 
space  containing  data  does.  However, 
defragmenting  free  space  takes  extra 
time.  Microsoft  Corp.’s  Windows  Disk 
Defragmenter  focuses  only  on  areas 
with  data. 

Diskeeper  deliberately  chooses  to 
save  processing  time  by  not  defrag¬ 
menting  free  space.  PerfectDisk  tackles 
both  but  takes  significantly  more  time 
as  it  unifies  free  space  and  consoli¬ 
dates  files.  Defragmentation  time  isn’t 
the  only  trade-off,  however.  If  you  de¬ 
fragment  only  data  on  a  disk  that’s 
nearing  capacity  and  then  save  a  file 
that’s  bigger  than  any  available  chunk 
of  contiguous  free  space,  the  operating 
system  will  have  to  fragment  the  new 
file  right  from  the  get-go. 

But  Diskeeper  product  manager 
Michael  Materie  claims  that  splitting 
files  into  two  to  three  fragments  is  not 
a  problem  in  most  cases.  “Putting  all 
the  free  space  into  a  single  chunk  is 
only  useful  for  some  purposes  —  for 
very  large  files,”  he  says. 

According  to  Raxco  CEO  Bob  Nolan, 
if  you’re  talking  about  a  workstation 
with  a  small  hard  drive  that’s  half  emp¬ 
ty  and  all  you’re  concerned  about  is 
data,  then  any  product  will  defragment 
it.  The  differences  between  the  prod¬ 
ucts  start  emerging  “as  the  disk  starts 
to  fill  up,  as  severity  of  fragmentation 
increases,  and  as  remaining  free  space 
gets  increasingly  fragmented,”  he  says. 

Still,  Raxco’s  approach  takes  longer, 
and  the  incremental  value  of  complete 
defragmentation  is  questionable,  ac¬ 
cording  to  Diskeeper.  It  opts  for  a  fast 
but  good  enough  pass  to  save  time.  Be¬ 
cause  of  the  dynamic  nature  of  storage, 
the  drive  is  constantly  writing  and 
deleting  files,  and  free  space  is  contin- 

METHOD  AND  BENEFITS 

6o  online  to  find  out  how  Computerworld  put  the 
defraggers  through  their  paces:  QuickLink  57552 

Defragmenting  makes  sense  in  some  situations  - 
but  not  all:  QuickLink  57553 
www.computerworld.com 


ually  changing. 

Materie  contends  that  with  Diskeep- 
er’s  free-space  engine,  “we’ll  do  a  com¬ 
parable  job  to  Raxco,  but  we’ll  do  it 
over  a  period  of  time  rather  than  all 
at  once.” 

Head  to  Head 

In  our  tests,  PerfectDisk  and  Diskeeper 
turned  in  performances  in  keeping 
with  their  developers’  stated  approach¬ 
es  to  defragging.  PerfectDisk  took 
about  10  minutes  to  defragment  3.5GB 
of  data  residing  in  23,422  files  on  a  5GB 
partition,  versus  just  under  3  minutes, 
30  seconds  for  Diskeeper  (see  table). 
But  Diskeeper  left  the  partition  with 
more  excess  fragments  and  files  still 
broken  up. 

Windows  XP’s  Disk  Defragmenter 
took  slightly  longer  than  Diskeeper,  at 
3  minutes,  56  seconds,  and  it  left  more 
excess  fragments  but,  oddly,  fewer 
fragmented  files.  Also,  the  Windows 
utility  left  more  fragments  in  the  most 
fragmented  file  on  disk. 

In  keeping  with  Diskeeper’s  philo¬ 
sophy  of  producing  better  defragging 
over  time,  we  reran  its  product  a  sec¬ 
ond  time  on  the  same  partition.  This 
time  the  program  completed  quickly, 
in  just  1  minute,  23  seconds.  A  second 
pass  produced  marginally  better  re¬ 
sults,  cutting  the  total  number  of  ex¬ 
cess  fragments  to  1,281.  A  third  pass 
dropped  that  to  991. 

The  three  products  also  provided 
very  different  reports,  both  before  and 
after  defragmentation.  Disk  Defrag¬ 
menter’s  was  the  most  sparse,  with 
only  a  small  text  file  for  statistics.  Its 
graphical  display  was  similar  to  that  of 
Diskeeper  but  was  confined  to  a  single 
line.  PerfectDisk  provided  an  exten¬ 
sive,  nicely  formatted  report  that  was 
easy  to  save  and  use,  but  its  graphical 
display  was  more  difficult  to  read.  It 
indicated  the  difference  between  frag¬ 
mented  and  nonfragmented  files  with 
only  a  tiny  white  border  around  each 
graphical  data  block,  with  no  other 
color  differentiation  except  for  type 
of  file  use. 

Diskeeper’s  graphical  report  was  the 
easiest  to  read,  with  fragmented  areas 
in  red  and  unfragmented  ones  in  blue. 
But  it  provided  little  in  the  way  of  sta¬ 
tistics  and  generally  presented  these  in 
a  pop-up  window  that  didn’t  even  have 
a  button  on  it  for  saving  the  message. 

PerfectDisk  didn’t  complain  about 
our  nearly  full  test  disk,  but  Diskeeper 
notified  us  during  each  test  run  that 
the  drive  was  too  full  (it  wanted  to 
see  20%  free  space),  and  the  program 
warned  that  this  was  a  bigger  problem 
than  fragmentation. 


While  PerfectDisk  comes  out  ahead 
on  the  strength  of  its  defragging  abili¬ 
ties  and  statistics-filled  reports, 
Diskeeper  runs  much  faster  and  pro¬ 
vides  reports  that  are  easier  to  read. 
The  defragging  utility  that  comes  with 
Windows  is  adequate  but  not  nearly  as 
effective  as  the  other  two  products. 

If  the  length  of  time  required  to  de¬ 
fragment  is  critical,  then  Diskeeper  is 
the  obvious  choice.  For  extreme  situa¬ 
tions  and  much  more  complete  defrag¬ 


mentation,  PerfectDisk  is  the  clear 
winner.  The  Windows  XP  utility  is,  of 
course,  free  and  better  than  nothing. 
Before  making  a  choice,  however,  ad¬ 
ministrators  should  do  their  own  test¬ 
ing  using  files  and  disk  capacities  that 
closely  mirror  their  specific  environ¬ 
ments.  ©  57550 


Kay  is  a  Computerworld  contributing 
writer  in  Worcester,  Mass.  Contact  him 
at  russkay@charter.net. 


Disk  Defragmenter  Test  Results 


Computerworld  tested  PerfectDisk  and  Diskeeper  on  a  56B  Serial  ATA  disk  drive  partition  containing 
23,422  highly  fragmented  files.  To  challenge  the  programs,  disk  drives  were  filled  to  85%  of  capacity 
(95%,  including  reserved  space  for  the  master  file  table)  Results  for  Windows  XP’s  defragmentation 
utility  are  also  shown  for  comparison. 
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Bottom-Up  Infosec 
Trumps  Top-Down 


The  higher-ups  want  a  plan  on  paper,  and 
our  security  manager’s  plan  resides  in  her 
head.  But  in  the  end,  hers  covers  more  of 
the  bases  than  theirs.  By  C.  J.  Kelly 


IN  all  my  career,  whether 
in  the  public  or  private  sec¬ 
tor,  I  have  never  seen  a  top- 
down  information  security 
plan  in  place.  In  other  words, 
I’ve  seen  nothing  that  would 
show  that  someone  at  the 
highest  levels  of  the  organiza¬ 
tion  is  thinking  about  informa¬ 
tion  security  and  has  integrat¬ 
ed  it  into  the  mission,  goals 
and  objectives  of  the 
organization.  Instead, 
information  security 
has  developed  —  or 
should  we  say  stum¬ 
bled  along?  —  from 
the  bottom  up,  with 
IT  managers  or  info- 
sec  managers  simply  trying  to 
get  individual  projects  ap¬ 
proved  and  implemented. 

So  it  came  as  a  surprise  this 
week  when  a  template  for  an 
information  security  plan  ap¬ 
peared  in  my  in-box,  with  a 
note  from  my  chief  to  fill  in 
the  blanks  and  have  it  back  to 
him  within  a  week.  This  was  a 
real  top-down  effort:  The  gov¬ 
ernor  had  issued  an  executive 
order  requiring  that  the  state’s 
chief  information  security  of¬ 
ficer  (CISO)  gather  plans  from 
all  the  state  agencies. 

Setting  the  Pace 

Now,  I  guess  you  could  say  I’m 
a  bottom-up  kind  of  person, 
because  I  usually  set  the  pace 
for  information  security  initia¬ 
tives  rather  than  wait  for 
someone  to  hand  them  down. 

I  would  have  to  take  a  look  at 
this  template  and  see  how  my 
bottom-up  approach  meshed 
with  this  top-down  directive. 

After  a  quick  perusal  of  the 
document,  I  realized  that  it 
had  been  generated  by  the  Na¬ 
tional  Institute  of  Standards 


and  Technology.  NIST  has 
done  a  great  job  of  supplying 
such  templates  for  government 
bodies.  My  only  complaint  is 
that  they  are  more  like  rough 
starting  points  than  definitive 
guides.  Of  course,  I  don’t  know 
how  you  could  publish  a  defin¬ 
itive  guide  when  it  comes  to 
anything  related  to  technology, 
since  the  rate  of  change  is  phe¬ 
nomenal  and  there 
are  so  many  varia¬ 
tions  on  the  theme. 

You  have  to  give 
the  state  CISO  a  pat 
on  the  back  for  even 
trying  to  bring  myri¬ 
ad  agencies  into 
some  form  of  compliance  with 
federal  and  state  guidelines. 

I  was  most  curious  to  know 
if  “filling  in  the  blanks”  of  the 
document  was  going  to  show 
our  agency  lacking  in  any  im¬ 
portant  areas.  We  have  a  plan, 
but  it  resides  in  my  mind.  Now 
I  was  faced  with  an  exercise 
that  would  force  me  to  docu¬ 
ment  and  audit  our  informa¬ 
tion  security  efforts. 

First  up  was  the  stated  pur¬ 
pose  of  the  plan:  to  document 
the  security  controls  that  are 
in  place  or  planned,  delineate 
responsibilities  and  expected 
behavior,  identify  state  and  in¬ 
dividual  agency  technical  as¬ 
sets,  and  establish  a  means  of 
classifying  protective  mea¬ 
sures  in  three  categories:  pre- 


We  have  a  plan, 
but  it  resides  in 
my  mind. 


vention,  detection  and  reac¬ 
tion.  (This  last  part  wasn’t  too 
different  from  what  we  used 
to  say  in  the  private  sector, 
where  we  talked  about  the 
three  D’s:  defend,  detect  and 
deter.  No  matter  how  you  slice 
it,  there  are  categories  of 
things  you  have  to  do  to  pro¬ 
tect  information  assets.) 

Filling  in  the  Blanks 

Then  came  the  blanks,  which 
the  template  arranged  in  eight 
major  sections.  The  first  sec¬ 
tion  merely  required  me  to 
document  the  number  of  loca¬ 
tions  we  operate  in,  provide 
the  name  of  the  information 
security  officer  (that’s  me), 
and  describe  the  agency’s  crit¬ 
ical  business  functions. 

The  second  section  con¬ 
cerned  information  security 
management.  The  previous 
ISO  had  spent  a  year  develop¬ 
ing  and  documenting  a  com¬ 
prehensive  information  secu¬ 
rity  manual  based  on  NIST 
guidelines  that  contained 
agency  policy  and  procedures. 

I  scored  our  agency  at  100% 
complete  for  the  first  section, 
but  for  the  second  section,  I 
had  to  give  us  50%.  There  was 
a  lot  of  work  to  do  in  the  area 
of  risk  assessment  and  audit, 
even  though  we  had  plenty  of 
policies  in  place.  We  hadn’t 
had  an  external  audit  of  our 
environment  in  a  few  years. 

The  third  section  was  on  in¬ 
formation  security  awareness 
and  training.  Technically,  we 
could  score  100%  complete 
in  this  area,  but  as  you  may 
know  from  a  previous  column 
[QuickLink  56570],  what  we 
have  for  training  is  boring  and 
ineffective.  We  are  in  the  proc¬ 
ess  of  creating  on-demand, 
Web-based,  full-motion  video 
training  modules  to  address 
both  security  and  privacy  con¬ 
cerns.  I  scored  us  at  90%  com¬ 
plete.  And  I  chuckled  to  my¬ 
self  as  I  thought  about  the 
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state-level  training  program, 
which  is  on-demand  and  Web- 
based  but  worse  than  a  Power¬ 
Point  presentation. 

We  scored  equally  high  on 
personnel  security.  We  have  a 
badging  system  —  though  it’s 
manual  —  and  we  run  back¬ 
ground  checks  before  hiring 
anyone.  We  have  a  process 
that  allows  us  to  immediately 
disable  accounts  when  an  em¬ 
ployee  is  terminated,  and  a 
process  for  tracking  access 
control  levels  and  secured  ar¬ 
eas  where  people  without  keys 
aren’t  allowed. 

The  next  section,  data  and 
application  security,  was 
short.  The  only  requirement 
was  that  we  have  a  way  to 
grant  access  to  data  and  appli¬ 
cations  on  a  need-to-know  ba¬ 
sis.  Check.  I  was  surprised 
that  nothing  was  mentioned 
about  secure  coding  methods 
or  a  requirement  to  have  Web- 
based  applications  audited. 

The  section  on  software  se¬ 
curity  was  also  short,  the  only 
requirement  being  that  we 
comply  with  software  piracy 
and  copyright  laws.  Check. 

Communications  security 
wras  not  much  better  and 
concerned  itself  only  with 
LAN  and  voice  security.  This 
assumes  that  the  state-level 
security  folks  take  responsibil¬ 
ity  for  the  WAN.  Check. 

Physical  security  and  envi¬ 
ronmental  controls  were  the 
usual  fare.  There’s  not  much 
you  can  do  when  you  are 
housed  in  an  old,  drafty  build¬ 
ing  that  experiences  frequent 
power  outages.  Check. 

Not  so  bad.  If  I  had  to  grade 
myself,  we  would  get  an  A. 

The  conclusion  I  came  to  was 
the  one  I  had  before:  It’s  a 
rough  starting  point.  Our 
bottom-up  efforts  are  superior 
to  the  top-down  efforts  be¬ 
cause  security  folks  under¬ 
stand  security.  Administrative- 
legislative  types  don’t.  I 


WHAT  DO  YOU  THINK? 

This  week’s  journal  is  written  by  a  real 
security  manager,  “C.J.  Kelly,”  whose 
name  and  employer  have  been  disguised 
for  obvious  reasons.  Contact  her  at 
mscjkelly@yahoo.com,  or  join  the  dis¬ 
cussion  in  our  forum:  QuickLink  a1590 

To  find  a  complete  archive  of  our 
Security  Manager’s  Journals,  go  online  to 

O  computerworid.com/secjournal 
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Report:  Phishing 
Hurts  E-commerce 

Consumers’  confidence  in  the 
security  of  online  transactions 
is  slipping  because  of  the 
growth  of  phishing-related 
fraud  and  identity  theft,  ac¬ 
cording  to  Gartner  inc.  Three- 
fourths  of  5,000  online  con¬ 
sumers  surveyed  by  Gartner  in 
May  said  they  have  become 
more  cautious  about  where 
they  shop  online,  and  one-third 
reported  buying  fewer  items 
than  they  would  typically  pur¬ 
chase  because  of  security 
concerns. 


Oracle  Patches  88 
Holes  With  Update 

Oracle  Corp.  released  a  bundle 
of  critical  security  patches  for 
its  software  last  week,  fixing 
88  vulnerabilities  in  various 
products,  including  its  data¬ 
base  and  application  servers 
and  some  PeopleSoft  and  J.D. 
Edwards  applications.  A  work¬ 
around  exists  for  just  one  of 
the  vulnerabilities,  according 
to  Oracle,  which  recommends 
applying  the  patches  as  soon 
as  possible.  The  patches,  part 
of  Oracle’s  quarterly  security 
update  program,  affect  ver¬ 
sions  of  its  database  software 
from  Version  8i  onward.  Cus¬ 
tomers  covered  by  Oracle’s 
Extended  Maintenance  Sup¬ 
port  or  Extended  Support  plans 
can  download  the  patches. 


DDoS  Attacks Top 
Threat  for  ISPs 

Results  of  Arbor  Networks 
lnc.’s  Worldwide  ISP  Security 
Report  indicate  that  90%  of 
Internet  service  providers  find 
that  “brute  force”  distributed 
denial-of-service  (DDoS)  at¬ 
tacks  from  bot  networks  are 
their  single  biggest  hassle. 
Rapidly  spreading  worms  and 
DNS  poisoning  attacks  ranked 
second  and  third,  respectively, 
on  the  list.  Just  29%  of  the 
ISPs  surveyed  said  they  have 
automated  services  to  counter 
and  trace  DDoS  attacks.  The 
report  was  based  on  survey 
responses  from  36  large  ISPs 
in  the  U.S.,  Europe  and  Asia. 
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J.D.  Power  and  Associates  2005  Major  Provider  Business  Telecommunications  Services  Study1®1. 
Broadband  Data  segment  includes  services  such  as  DSL,  cable  modem,  ISON,  T-t,  etbernet  arid, 
videoconferencing  services.  Study  conducted  among  5,178  businesses  with  2-500+  employees  that 
subscribe  to  major  providers  in  the  broadband  business  telecommunications  market,  www.idpower.cdm 
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ff  BON  KLEINBERG  is  a  computer 
H  scientist  with  a  reputation  for 
'tackling  important,  practical 
problems  and,  in  the  process,  deriving 
deep  mathematical  insights,”  says  the 
Web  site  of  the  John  D.  and  Catherine 
T.  MacArthur  Foundation.  Kleinberg,  a 
professor  of  computer  science  at  Cor¬ 
nell  University,  was  a  recent  winner  of 
a  MacArthur  Fellowship,  often  referred 
to  as  a  “genius”  grant. 

Kleinberg’s  research  covers  a  di¬ 
verse  range  of  topics,  including  com¬ 


puter  and  social  networking,  network 
routing  and  search,  genomics  and 
protein  structure  analysis.  He  has 
found  surprising  similarities  in  the 
underpinnings  of  these  disciplines. 

For  example,  he  discovered  how  to 
build  networks  so  that  one  node  can 
connect  to  a  faraway  node  efficiently 
and  without  knowledge  of  the  overall 
network  topology.  The  idea  builds  on 
the  concept  of  “six  degrees  of  separa¬ 
tion,”  which  holds  that  any  two  people 
can  find  connections  to  each  other 


Shrinkin 


DEGREES  of  SEPARATION 


MacArthur 
prize  winner 
connects 
people 
as  well  as 
disciplines. 
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via  shared  relationships  with  others. 
Kleinberg’s  discoveries  have  influ¬ 
enced  the  design  of  decentralized 
peer-to-peer  file-sharing  services  such 
as  Freenet  and  social  networks  such  as 
LiveJournal.com. 

When  he  worked  at  IBM,  Kleinberg 
showed  how  search  engines  can  be  im¬ 
proved  by  considering  not  only  a  site’s 
content,  but  also  the  number  and 
quality  of  links  to  it.  He  developed  the 
concept  of  “authorities”  (a  PC’s  manu¬ 
facturer,  for  example)  and  connecting 
“hubs”  (reviews  of  that  PC),  and  he  fig¬ 
ured  out  how  to  recursively  Find  the 
best  hubs  and  authorities  for  a  given 
search.  His  algorithms  can  also  be  used 
to  define  and  explain  social  groups  and 
their  connections.  In  a  recent  inter¬ 
view,  he  told  Computerworld  where 
some  of  those  ideas  could  lead. 

Are  the  major  public  search  engines  today 
using  your  network  search  principles?  Yes, 
but  exactly  what  they  do  is  a  closely 
guarded  secret.  They  all  have  very  ex¬ 
tensively  tuned  methods  that  combine 
link  information  with  content  informa¬ 
tion.  The  search  engine  that  most  di¬ 
rectly  incorporates  hubs  and  authori¬ 
ties  is  Teoma,  used  by  Ask  Jeeves. 

Is  search  a  mature  technology?  It’s  still  in 
its  early  stages.  The  more  that’s  done, 
the  more  it  becomes  clear  it’s  a  very 
hard  problem.  What  you’d  like  a  search 
engine  to  do  is  simulate  the  experience 
of  talking  with  someone  very  knowl¬ 
edgeable  about  a  topic.  Instead,  you 
type  a  few  words  into  a  box,  and  it 


gives  you  some  links.  What’s  impres¬ 
sive  is  how  far  you  can  get  with  that. 

What’s  an  example  of  a  question  you’d  like 
to  ask  the  search  engine  of  the  future? 

“What’s  been  the  reaction  to  the  re¬ 
lease  of  Mac  OS  X  Tiger?  Have  people 
been  happy  with  it  or  not  happy,  and 
how  is  Apple  responding?”  You  can 
hunt  around  until  you  find  a  page 
where  some  human  has  answered  that, 
but  there’s  no  way  to  get  a  search  en¬ 
gine  to  answer  it. 

What  else  is  in  the  future  of  search?  These 
tools  weren’t  designed 
to  track  events  un¬ 
folding  hour  by  hour. 

When  we  use  the  Web 
to  keep  up  with  break¬ 
ing  news,  we  don’t  use 
search  engines;  we  go 
to  a  few  news  Web 
sites.  But  it  doesn’t 
have  to  be  that  way. 

You  are  starting  to 
see,  especially  in  the 
blogging  domain,  peo¬ 
ple  trying  to  create 
tools  that  have  some 
of  that  capability. 

Where  will  these  kinds  of 
advancements  come 
from?  There’s  a  lot  of  feedback  be¬ 
tween  university  research  and  compa¬ 
nies  like  Google,  Yahoo  and  Microsoft. 
The  companies  are  running  high- 
volume  services  that  are  extremely  in¬ 
novative,  but  it’s  very  hard  for  them  to 


— 

pursue  all  those  interesting  leads  and 
possible  dead  ends.  In  universities,  you 
may  have  the  freedom  to  pursue  slight¬ 
ly  zany  ideas  that  might  not  pan  out. 

Are  there  any  lessons  in  your  research  for 
information  systems  developers?  If  you’re 
going  to  think  of  new  online  media  or 
new  ways  of  communicating  online  — 
not  just  IMing,  but  Internet  telephony 
and  Skype  and  all  those  things  —  then 
you’re  going  to  have  to  think  about  so¬ 
cial  networks  and  how  people  use  them. 
In  the  end,  these  tools  are  to  connect 
people  to  each  other  and  to  informa¬ 
tion,  and  the  way  peo¬ 
ple  succeed  or  fail  at 
that  is  influenced  by  the 
nature  of  the  tools. 

Any  other  advice  for  IT 
people?  Political  dis¬ 
course  seems  to  be  get¬ 
ting  more  polarized. 
Something  we  don’t  un¬ 
derstand  is  to  what  ex¬ 
tent  that’s  an  effect  of 
the  media  we’re  using. 

Is  there  something 
about  blogging  and  on¬ 
line  discussion  that 
causes  polarization  in 
some  subtle  way?  It’s  an 
important  challenge  for 
people  on  the  computer  side,  because 
it’s  within  our  power  to  create  tools 
that  shape  discourse.  For  us  to  be  able 
to  help  make  civil  dialogues  more  pro¬ 
ductive  would  be  an  amazing  and  won¬ 
derful  thing.  ©  57328 
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KLEINBERG’S  RESEARCH  aims  to 
transform  Internet  search.  Above  is  a 
map  of  the  Internet,  with  major  connec¬ 
tions  color-coded  by  IP  address. 
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Certus  Launches 
Compliance  Portlet 

Certus  Software  Inc.  has  intro¬ 
duced  Governance360,  a  compli¬ 
ance  portlet  system.  Companies 
can  use  Governance360  to  in¬ 
clude  information  such  as  con¬ 
trols  data,  summaries  and  alerts 
in  a  financial  management  portal, 
said  Certus.  The  system  can  also 
segment  a  company’s  financial 
activities  by  functional  area.  The 
Web-services-based  system  will 
ship  by  year’s  end.  Pricing  for  the 
product  hasn’t  been  finalized. 


Enterasys  Rolls  Out 
Wireless  Switch 

Enterasys  Networks  Inc.  has  an¬ 
nounced  the  RoamAbout  8400 
wireless  switch,  which  has  four 
Gigabit  Ethernet  connections  and 
supports  up  to  120  access  points 
in  a  Wi-Fi  network.  The  switch  is 
available  now  for  $11,995. 


Tandberg  Releases 
Multimedia  System 

Tandberg  ASA  announced  the 
Tandberg  MXP  Profile  Series, 
a  line  of  endpoint  devices  that 
feature  flat-panel  displays  and 
stereo-quality  audio  for  videocon¬ 
ferencing  and  multimedia  presen¬ 
tations.  The  product  line  includes 
the  6000  MXP  Profile,  which 
is  designed  for  midsize  to  large 
groups  and  comes  with  either  a 
43-in.  or  50-in.  flat-panel  plasma 
display.  Pricing  for  Model  6000 
starts  at  $33,900. 


Astaro  Adds  Two 
Antivirus  Tools 

Astaro  Corp.  has  launched  Version 
6.1  of  its  Astaro  Security  Gateway 
software.  The  new  release  in¬ 
cludes  integrated  virus-scanning 
tools  from  Kaspersky  Lab  and 
ClamAV.  It  also  scans  Web  ad¬ 
dresses  in  messages  and  checks 
them  against  databases  of  Web 
addresses  associated  with  activi¬ 
ties  like  spamming,  said  Astaro. 
Pricing  starts  at  $330  for  the 
software  alone  and  at  $695  for  a 
Web  appliance  with  the  software. 
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Endpoint  Security: 
Let  the  Users  Grumble 


THE  SECURITY  MECHANISMS  that  protect 
the  corporate  network  and  enterprise  ap¬ 
plications  may  be  well  established,  but  for 
many  organizations,  endpoint  security  re¬ 
mains  a  weak  point  —  and  a  big  headache. 


You  say  you  haven’t  done 
anything  about  that  head¬ 
ache?  Then  take  two  aspirin 
and  get  going,  because  the 
cost  of  doing  nothing  is  on 
the  rise.  Taken  together,  the 
compliance  requirements 
for  protecting  data  against 
loss,  the  risk  to  the  organi¬ 
zation  of  intellectual  prop¬ 
erty  theft,  and  the  support 
challenges  arising  from  cor¬ 
rupted  PCs  and  laptops 
make  a  strong  case  for 
tighter  endpoint  controls. 

The  problem  is,  users  don’t  like  end¬ 
point  security  controls.  They  will  ac¬ 
cept  antivirus  and  antispyware  agents, 
and  they  may  grudgingly  accept  a 
desktop  firewall.  But  most  users  will 
grumble  about  anything  that  restricts 
the  flexibility  and  freedom  that  the  PC 
has  come  to  represent.  Overcoming 
those  objections  is  a  challenge.  So  is 
finding  the  right  controls. 

Gene  Peters  is  deploying  port-block¬ 
ing  software  that  allows  policy-based 
control  over  the  end  user’s  USB,  in¬ 
frared  and  PC  Card  slots.  A 1GB  USB 
disk  can  carry  a  lot  of  information  out 
the  door.  “It’s  just  taking  the  level  of 
paranoia  to  the  next  degree,”  says  Pe¬ 
ters,  director  of  information  services 
at  the  Philadelphia  Stock  Exchange. 

The  software,  from  Safend  Ltd.  in 
Tel  Aviv,  leverages  policies  set  in  Ac¬ 
tive  Directory  and  can  allow  one  type 
of  device  to  connect  but  not  another. 
So,  how  do  Peters’  users  react  to  such 
in-your-face  controls?  “We’ve  gotten 
some  pushback,  but  we’ve  worked  out 
all  the  issues  and  pretty  much  gotten 
our  way,”  he  says. 


Part  of  that  process  is 
getting  top  management’s 
support.  Another  part  is 
getting  the  user  to  under¬ 
stand  that  in  a  business 
setting,  there  is  no  “per¬ 
sonal”  in  “personal  com¬ 
puter.”  These  are  business 
machines.  If  users  don’t 
like  it,  they  should  “suck  it 
up  and  deal,”  as  my  pre- 
teen  at  home  would  say. 

Content  analysis  and 
blocking  tools  close  an¬ 
other  avenue  for  endpoint  data  loss. 
For  example,  Packetshare  from  Pal¬ 
isade  Systems  Inc.  analyzes  content, 
classifies  it  as  private  or  public,  and 
restricts  outbound  transmission  of 
that  data  by  examining  each  packet  in 
outbound  data  streams,  such  as  in  in¬ 
stant  messaging  exchanges.  The  edge 
appliance  can  also  block  the  protocols 
used  by  unauthorized  e-mail,  instant 
messaging  or  peer-to-peer  programs. 

In  contrast,  enterprise  rights  man¬ 
agement  (ERM)  systems  allow  the 
distribution  of  protected  content  but 
must  first  encrypt  it  and  require  au¬ 
thentication  before  the  content  can 
be  read  [QuickLink  55119],  The  ERM 
approach  is  more  intrusive  —  the  user 
must  classify  documents  at  the  time 
of  creation  —  but  more  comprehen¬ 
sive.  ERM  systems  restrict  who  can 
view  a  document  after  it  leaves  the 
organization  and  whether  it  can  be 
copied  or  printed. 

The  stability  of  the  end  device  itself 
is  a  security  concern,  since  unwanted 
plug-ins,  spyware,  malware  and  other 
software  the  user  might  knowingly  or 
unknowingly  load  can  create  unneces¬ 


sary  help  desk  headaches  —  and  open 
new  holes  through  which  corporate 
data  can  pass.  Policies  set  in  Active 
Directory  or  through  PC  configuration 
management  tools  can  lock  down 
desktops  to  prevent  the  entry  of  such 
programs. 

For  example,  Peters  uses  Active 
Directory  policies  that  are  so  restric¬ 
tive  that  users  can’t  even  install  a 
browser  plug-in.  But  many  IT  organi¬ 
zations  can’t  get  away  with  that.  Users 
want  —  and  management  generally 
supports  —  some  level  of  flexibility. 

Application-blocking  tools  provide 
some  wiggle  room.  Start-up  Bit9  Inc.’s 
Parity  tracks  all  programs  and  creates 
a  “gray  list”  of  unknown  executables. 
Administrators  can  set  policies  by 
user  or  group  that  either  allow  execu¬ 
tion,  stop  the  program  from  executing 
until  the  administrator  reviews  and 
approves  it,  or  allow  the  user  to  run 
the  program  but  issue  an  alert  to  the 
administrator.  Users  can  download 
unknown  programs,  but  those  pro¬ 
grams  won’t  execute. 

By  casting  a  wider  net  to  catch  all 
unwanted  programs,  organizations  can 
sidestep  the  challenge  of  trying  to 
identify  and  separate  out  spyware, 
viruses  and  other  malware  while  also 
controlling  the  installation  of  “legiti¬ 
mate”  programs  that  could  create  ap¬ 
plication  conflicts  or  other  stability 
problems. 

All  of  these  tools  and  approaches 
can  be  helpful,  but  the  trick  is  balanc¬ 
ing  your  organization’s  risk  tolerance 
against  the  desire  for  end-user  flexibil¬ 
ity.  While  a  total  lockdown  may  not  be 
feasible  in  your  company,  tighter  con¬ 
trols  are  the  way  of  the  future.  Ulti¬ 
mately,  most  users  will  have  to  accept 
that.  If  they  don’t,  well,  it’s  a  new  era. 
They’ll  just  have  to  suck  it  up  and  deal. 
O  57596 _ 
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AFTER  FIVE  YEARS  as 
a  LAN  specialist  at 
Albany  International 
Corp.  in  Albany,  N.Y., 
a  $1  billion  maker  of 
manufacturing  prod¬ 
ucts  for  the  paper  in¬ 
dustry,  Stephen  Nois- 
seau  found  himself 
with  a  4.1%  raise  in 
2005.  Last  year’s 
raise  wasn’t  any  bet¬ 
ter.  Did  he  complain? 
Grumble  over  his 
coffee?  Stage  a  coup  d’etat  with  other  IT  staffers? 
Nope.  He  looked  at  the  situation  philosophically. 

“I  guess  that’s  the  way  the  cookie  crumbles,” 
Noisseau  says.  “I’ll  take  4%  over  nothing.  We’re 
getting  basically  cost-of-living  raises.” 

Where’s  the  anger?  The  passion?  The  boiling 
point  that  IT  employees  were  so  close  to  reaching 
in  2004  when  salaries  then  rose  just  3%? 

Perhaps  repetition  breeds  resignation. 

For  the  fourth  year  in  a  row,  IT  workers  across 
the  board  received  only  modest  raises  —  their  pay 
increased  by  an  average  of  just  3%  in  2005,  match¬ 
ing  last  year’s  average  salary  increase,  according 
to  Computer-world's  19th  Annual  Salary  Survey, 
which  studied  the  compensation  and  bonuses  of 
14,253  IT  workers. 

IT  raises  still  lagged  slightly  behind  the  average 
of  about  3.2%  for  all  U.S.  workers  as  reported  by 
the  Bureau  of  Labor  Statistics.  While  the  majority 
of  respondents  (69%)  said  their  2004  base  salary 
increased  from  one  year  ago,  31%  experienced  ei¬ 
ther  no  change  in  salary  or  had  their  pay  cut. 
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The  Good  News 


So  here  we  are,  another  flat  year.  But  there  is  some 
good  news.  Bonuses  increased  2.8%  in  2005,  com¬ 
pared  with  1%  last  year.  Is  that  enough  to  keep  em¬ 
ployees  happy?  Apparently  so,  according  to  the 
survey.  When  asked  about  their  overall  satisfac¬ 
tion  with  their  jobs, 
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63%  of  the  respon¬ 
dents  said  they  were 
either  “very  satis¬ 
fied”  or  “satisfied.” 
Only  18%  expressed 
dissatisfaction. 

Are  cost-of-living- 
only  raises  the  new 
normal?  Some  indus¬ 
try  analysts  say  yes, 
at  least  for  now.  “A 
return  to  normalcy 
has  clearly  happened 
over  the  last  few 
years,”  explains 
David  Van  De  Voort, 


WITH  ANOTHER  YEAR 

OF  SKIMPY  3°/o  RAISES, 

IT  SURE  LOOKS  THAT  WAY 
FOR  MOST  IT  WORKERS. 

BY  STACY  COLLETT 
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global  leader  of  the  IT  Workforce  Effectiveness 
group  at  Mercer  Human  Resource  Consulting  LLC  in 
Chicago.  The  Internet  bust,  the  subsequent  slow  eco¬ 
nomic  recovery  and  the  move  toward  outsourcing 
have  kept  salary  increases  low  and  employees  rela¬ 
tively  quiet  about  lackluster  pay  raises. 

“All  that  special  treatment  that  IT  people  were  get¬ 
ting  [before  Y2k  and  Web-enabling]  just  stopped  — 
the  high  pay  raises,  the  special  bonuses,”  Van  De 
Voort  explains.  “Many  employers  didn’t  even  bother 
to  explain  it,  and  [employees]  didn’t  squeal,”  for  fear 
that  their  jobs  might  be  outsourced  to  lower-paid 
workers.  Nearly  half  (48%)  of  all  respondents  said 
that  their  organizations  outsource  work. 

One  project  manager  at  a  prominent  East  Coast  fi¬ 
nancial  company  knows  that  fear.  “During  Y2k,  the 
company  was  lucky  to  get  any  [new  IT  hires].  When 
they  found  somebody  who  knew  what  they  were  do¬ 
ing,  they  treated  them  with  respect  and  made  them 
part  of  the  team.”  Now  the  sentiment  toward  IT  em¬ 
ployees  has  changed.  “Senior  management  says,  ‘If 
you  don’t  like  the  work,  we’ll  get  somebody  in  India 
to  do  it.’  The  computer  people  are  seen  more  as  part 
of  the  technology  rather  than  part  of  the  human  re¬ 
source,”  says  the  project  manager,  who  asked  not  to 
be  named. 

The  good  news  is  the  trend  toward  offshoring  has 
slowed  a  bit  as  companies  have  become  more  aware 
of  the  quality  of  work  and  technical  support  they  re¬ 
ceive  from  overseas  workers,  says  Van  De  Voort. 

“The  whole  offshoring  dynamic  feels  a  little  less 
pressing  than  a  year  ago.  But  I  think  domestic  out¬ 
sourcing  will  continue  to  be  a  factor,”  he  says. 

Many  Already  Feel  Well  Compensated 

Christina  Shoppell  was  hired  as  a  Web  developer  at 
Providence,  R.I.-based  Care  New  England  Health 
System  at  the  height  of  the  tech  boom  in  early  2000. 
She  normally  receives  a  7%  annual  raise,  and  that’s 
OK  with  her.  “I  started  out  with  a  great  salary.  The 
bubble  hadn’t  burst  yet,”  says  Shoppell,  who  is  now  a 
senior  Web  developer.  Other  Web  developers  haven’t 
fared  nearly  as  well  this  year,  with  an  average  pay  in¬ 
crease  of  2.5%,  according  to  the  survey. 

Increases  were  about  the  same  at  all  levels:  The 
average  salary  for  a  middle  IT  manager  in  2005  is 
$90,691,  up  from  $88,208  last  year.  Senior  IT  managers 
earn  an  average  of  $129,835,  up  from  $126,130  in  2004. 

Todd  Caughey,  an  IT  manager  at  Harvey  Vogel 
Manufacturing  Co.  in  Woodbury,  Minn.,  saw  his  pay 
increase  just  2%  this  year.  “I  know  I’m  pretty  well  in 
line  with  the  industry,”  says  the  eight-year  veteran. 
“As  long  as  I  keep  up  with  inflation,  I’m  just  fine. 
There  are  a  lot  of  other  factors  in  job  satisfaction.” 

The  worst  is  over  for  Drummond  Co.  in  Birming¬ 
ham,  Ala.  Over  the  past  four  years,  the  $800  million 
coal  mining  company  decreased  its  budget  by  20%. 
Now  business  is  picking  up,  and  IT  staffers  received 
a  3.6%  pay  raise.  “I  can’t  say  there’s  anybody  who 
doesn’t  want  their  salary  to  accelerate  faster,”  says 
CIO  John  Fallis.  “As  a  company,  we’ve  been  doing 
very  well.  While  salaries  haven’t  reflected  that,  the 
bonuses  have.” 

Fallis  gave  his  direct  reports  bonuses  equal  to  7% 
to  9%  of  their  annual  pay  this  year.  Lower-level 
staffers  received  about  5%. 

Continued  on  page  44 


CHIEF  SECURITY  OFFICERS: 

BIGGER  RAISES,  BUT  NOT  ALWAYS  HIGH  PAY 


CHIEF  SECURITY  OFFICERS  earned 
the  highest  pay  increases  for  the 
second  year  in  a  row  at  6%,  ac¬ 
cording  to  Computerworlcfs  annual 
salary  survey.  But  while  CSOs  are 
in  demand,  their  salaries  haven’t 
reached  stratospheric  levels. 

“There’s  been  a  convergence  of 
supply  and  demand,  so  [companies] 
haven’t  had  to  pay  them  lots  of 
money,”  says  David  Van  De  Voort, 
global  leader  of  the  IT  Workforce 
Effectiveness  group  at  Mercer 
Human  Resource  Consulting.  Many 
CSOs  are  likely  former  senior  con¬ 
sultants  who  were  let  go  from  ma¬ 
jor  consulting  firms  that  have  suf¬ 
fered  through  a  slow  economy,  he 
explains. 

In  June,  Kris  Palmer  left  a  job  as 
information  security  officer  for  the 
state  of  Florida,  where  she  earned 
$63,000  annually,  for  an  $80,000- 
a-year  CIS0  position  at  The  Mosaic 
Co.,  a  $4.5  billion  maker  of  phos- 


SALARIES 


Has  your  base  salary  increased 
or  decreased  in  2005? 

Increased  No  change 


Decreased  9' 

AVERAGE  INCREASE  6% 
AVERAGE  DECREASE  9% 


INCREASES  BY  RANK 


Senior  management 

Base:  2,493 

Middle  management 

Base:  4.485 

IT  staffers 

Base:  7,275 


phate  and  potash  crop  nutrients  in 
Riverview,  Fla.  Though  her  salary 
lags  behind  the  average  salary  for 
senior  IT  managers  ($129,835), 


BY  THE  NUMBERS 


BONUSES 


Across  tlie  be 

»  8  % 

sard,  bonuses 

A  AAf 

Have  your  bonuses  increased 
or  decreased  in  2005? 

Increased  No  change 


r 

8% 

72' 

L 

i 

Decreased  10% 

AVERAGE  INCREASE  10% 
AVERAGE  DECREASE  25% 


SALARY 

BONUS 

3% 

3% 

CM 

2.9% 

2.6% 

2.3% 

she  still  feels  well  compensated. 
“That’s  the  salary  they  were  start¬ 
ing  at,”  Palmer  says,  but  she  notes 
that  she’ll  be  eligible  for  a  10% 
bonus  in  one  year. 

Meanwhile,  other  security  roles, 
such  as  business  continuity  and 
disaster  recovery  experts,  haven’t 
seen  much  of  a  pay  jump  either. 

“We  haven’t  yet  seen  the  pay  for 
those  jobs  take  a  big  turn  upward,” 
Van  De  Voort  says.  That’s  because 
systems  security  is  a  shared  re¬ 
sponsibility.  “Network  developers 
make  sure  the  network  is  secure, 
and  applications  folks  build  those 
applications  to  be  secure.  So  every¬ 
body  has  a  hand  in  it,”  he  says. 

But  information  security  special¬ 
ists,  security  managers  and  net¬ 
work  managers  all  received  higher- 
than-average  raises  this  year 
(3.8%  to  4.2%),  according  to  the 
survey. 

-  Stacy  Collett 


ABOVE-AVERAGE 
OVERALL  INCREASES 

Chief  security  officer  6% 


Computer  operator 


4.4% 


Information  security  specialist  4.2% 


Information  security  manager  3.8% 

Network  manager 

3.9% 

BELOW-AVERAGE 

OVERALL  INCREASES 

Senior  systems  analyst 

1.9% 

Database  administrator 

1.7% 

Manager  of  e-commerce 

1% 

GENDER  GAP  PERSISTS 

Men  pulled  down  higher  increases 
in  salary  and  bonuses  than  their 
female  colleagues  in  IT. 


GENDER 

SALARY 

BONUS 

Male 

2.8% 

CO 

■ 

CM 

Female 

2.6% 

2.3% 

Note:  Percentages  are  based  on  IT  workers  employed  full  time  or  part  time  in  an  IT  department. 
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Continued  from  page  42 

The  average  size  of  bonuses  reported  by  survey  re¬ 
spondents  this  year  was  2.8%,  up  from  1%  in  2004. 

“As  companies  continue  to  struggle  with  their  ability 
to  meet  employee  needs  within  their  fixed-cost  bud¬ 
gets,  they  are  looking  to  variable  pay  like  signing 
bonuses,  spot  cash  awards  and  project  milestone 
awards”  to  reward  employees,  says  Steven  E.  Gross, 
leader  of  Mercer’s  Employee  Rewards  business. 

Less  Stress,  More  Security 

The  major  stress-inducing  factors  affecting  IT  work¬ 
ers  all  dropped  slightly  this  year.  Fewer  than  half  of 
our  survey  takers  (47%)  reported  that  they  find  their 
jobs  “stressful”  or  “very  stressful.”  That’s  high  but 
lower  than  last  year’s  52%.  Meanwhile,  57%  indicated 
they  were  “very  secure”  or  “secure”  in  their  jobs,  up 
two  percentage  points  from  2004. 

“For  me,  the  stress  level  is  very  low,”  says  Albany 
International’s  Noisseau.  “The  company  closed  a 
couple  of  plants  over  the  last  two  years.  But  they’re 
done  with  that  for  the  foreseeable  future.  I  feel  very 
secure.” 

Some  employees  say  they  don’t  mind  a  bigger 
workload,  as  long  as  it’s  stress-free.  At  Care  New 
England  Health  System,  the  Web  development  work¬ 
load  is  heavy.  “There’s  a  backlog  of  requests,  but  not 
so  much  stress  because  people  are  willing  to  wait,” 
Shoppell  says.  “They  just  don’t  have  the  same  expec¬ 
tations  in  the  health  care  industry  as  in  the  corporate 
world,”  where  deadlines  are  more  difficult  to  maneu¬ 
ver,  she  explains. 

“Pent-up  demand  for  development  work  makes  em¬ 
ployees  think,  ‘My  company  needs  me.’  They  haven’t 
been  feeling  that  for  a  while,”  says  Van  De  Voort. 

At  Drummond,  budget  cuts  were  driven  by  the  IT 
department,  which  eliminated  all  of  the  company’s 
mainframes,  got  rid  of  consultants  and  streamlined 
operations.  “We  were  able  to  eliminate  costs,  up¬ 
grade  technology,  which  employees  love,  and  we  got 


How  does  your  stress  level 
compare  to  last  year’s? 


More 

stressful 


The  same 


Less 

stressful 


Not  in  same 
position  as  one 
year  ago  4% 


STRESS  BUCKETS 


How  stressful  is  your  job? 

Very  stressful 


Somewhat 

stressful 


Stressful 
Not  very  stressful 


Not  at  all 
stressful  2% 


a  bunch  of  new  toys  that  we  really  like  working 
with,”  Fallis  says. 

Get  used  to  the  new  normal,  at  least  for  now,  says 
Van  De  Voort.  When  it  comes  to  salaries,  “IT  is  like 
everybody  else  and  probably  will  be  until  the  econo¬ 
my  improves,”  he  says.  “That  may  have  been  starting 
to  happen,  but  we  now  have  some  general  concerns 
on  the  economy  with  oil  prices  and  other  things. 

“The  IT  workforce  and  concerns  about  being  able 


to  recruit  IT  professionals  will  be  a  leading  indicator 
of  real  economic  recovery,  because  we  know  that 
there  is  some  pent-up  need  for  IT  work.”  ©  57063 


Collett  is  a  Computerworld  contributing  writer. 
Contact  her  at  stcollett@aol.com. 

PUADTO.  For  compensation  information  for 
UllAll  I O.  30  IT  job  titles,  turn  to  PAGE  48. 


TOTAL 

COMPENSATION 

BY  REGION 


■  New  England:  Maine,  Vermont.  New 
Hampshire.  Massachusetts,  Connecticut, 
Rhode  Island 

*  Middle  Atlantic:  New  York.  New  Jersey, 

Pennsylvania 

s*  South  Atlantic:  Delaware.  District  of 
Columbia.  Maryland,  Virginia,  West  Virginia, 
North  Carolina,  South  Carolina.  Georgia. 
Florida.  Puerto  Rico,  U.S.  Virgin  Islands 

>  North  Central:  Wisconsin,  Michigan,  Illinois, 
Indiana,  Ohio,  North  Dakota.  South  Dakota, 
Minnesota,  Nebraska,  iowa.  Kansas,  Missouri 

South  Central:  Kentucky,  Tennessee, 
Mississippi,  Alabama.  Oklahoma,  Arkansas, 
Louisiana,  Texas 

*  Mountain:  Idaho,  Montana,  Wyoming, 
Nevada.  Utah,  Colorado,  Arizona,  New  Mexico 

*  Pacific:  Alaska.  Washington.  Oregon, 
California,  Hawaii.  Guam 


1 

NEW 

ENGLAND 

MIDDLE 

ATLANTIC 

SOUTH 

ATLANTIC 

NORTH 

CENTRAL 

:  B’l'I'MJH 

MOUNTAIN 

PACIFIC 

ClO/vice  president  of  IT 

$156,328 

$184,307 

$154,939 

$164,357 

$157,123 

$160,151 

$168,975 

Director  of  IT  operations 

$112,329 

$123,134 

$101,253 

$104,313 

$100,031 

$90,994 

$121,039 

IT  manager 

$81,979 

$95,140 

$87,274 

$82,645 

$80,000 

$77,371 

$89,191 

Project  manager 

$95,128 

$102,089 

$100,728 

$89,622 

$89,973 

$92,559 

$99,266 

Application  development  manager 

$103,251 

$105,703 

$101,879 

$97,029 

$97,694 

$95,505 

$109,048 

Database  administrator 

$92,419 

$80,307 

$83,105 

$82,996 

$76,232 

$79,355 

$88,530 

Help  desk/tech  support  specialist 

$61,589 

$49,082 

$50,926 

$44,897 

$43,785 

$44,757 

$56,654 

Technology/business  systems  analyst 

$76,470 

$76,914 

$78,449 

$72,525 

$69,102 

$65,296 

$81,587 

Network  administrator 

$64,020 

$60,963 

$58,570 

$50,582 

$50,371 

$45,076 

$58,978 

Network  engineer 

$73,109 

$74,709 

$74,951 

$64,300 

$69,389 

$69,282 

$78,069 

Programmer/analyst 

$76,107 

$67,654 

$67,698 

$64,867 

$69,157 

$63,184 

$80,048 

Software  developer 

$83,215 

$83,272 

$76,434 

$70,080 

$83,703 

$75,142* 

$100,872 

Software  engineer 

$85,089 

$81,387 

$81,479 

$80,885 

$84,402 

$87,423 

$93,625 

Systems  administrator 

$70,324 

$71,669 

$65,923 

$63,213 

$60,287 

$71,957 

$68,491 

Systems  analyst 

$73,641* 

$62,479 

$63,664 

$64,032 

$62,592 

$68,097 

$69,798 

Senior  systems  analyst 

$78,926 

$84,315 

$81,088 

$78,429 

$84,592 

$81,032* 

$95,285 

Systems  architect 

$116,464 

$104,385 

$96,895 

$94,164 

$103,466 

$111,821 

$114,976 

Gray  text:  The  total  base  for  this  job  title  in  this  particular  region  was  fewer  than  30  responses  but  more  than  15.  *  The  total  base  for  this  job  title  in  this  particular  region  was  fewer  than  16  responses 

These  figures  should  be  used  for  comparison  only,  because  they  don't  constitute  a  statistically  significant  sampling.  but  more  than  nine.  These  figures  should  be  used  for  comparison  only. 
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YOUR  JOB  IS  TO  KEEP  SYSTEMS  AND  APPLICATIONS  RUNNING. 
OUR  MISSION  IS  TO  KEEP  PEOPLE  AND  INFORMATION  CONNECTED. 

LET’S  WORK  TOGETHER. 


Continuous  access  to  information  no  matter  what.  That’s 
Information  Availability.  It’s  what  your  employees,  suppliers  and 
customers  demand  every  minute  of  every  day.  But  to  deliver  it 
flawlessly,  you  need  a  massive  global  infrastructure,  redundant 
systems  and  diverse  networks  being  monitored  and  supported 
by  skilled  technical  experts  at  secure  facilities.  That’s  exactly 
what  SunGard  provides. 

As  a  result,  we  can  offer  you  a  higher  level  of  availability  and 
save  your  company,  on  average,  25%  versus  building  the 
infrastructure  yourself.  Plus,  it's  a  vendor  neutral  solution  that 
lets  you  control  your  data, applications  and  network  while  giving 
you  the  flexibility  to  adjust  to  the  changing  needs  of  your 
business.  But  best  of  all,  it  lets  you  spend  more  time  solving 
business  problems  and  less  time  solving  technical  problems. 


For  years,  companies  around  the  world  have  turned  to 
SunGard  to  restore  their  systems  when  something  went 
wrong.  So,  it’s  not  surprising  that  they’re  now  turning  to  us 
to  mitigate  risk  and  make  sure  they  never  go  down  in  the 
first  place. 

You  want  your  network  and  systems  to  always  be  up  and 
running.  We  want  the  same  thing.  Let’s  get  together.  To 
learn  more,  visit  www.availability.sungard.com  or  call 
1-800-468-7483. 

Keeping  People 
and  Information 
Connected ?M 

'Potential  savings  based  on  IDC  White  Paper,  Ensuring  Information  Availability: 

Aligning  Customer  Needs  with  an  Optimal  Investment  Strategy. 


SUNGARD 

m  ___  B|  1.  »■■■  4%  ■ 


4S  COMPUTERWORLO  October  24, 2005 


MANAGEMENT 


www.computerworid.com 


MONEY  MAHERS 

Which  factors  would  most  influence 
you  to  change  your  job? 


Salary  increase 

81% 

Better  work/life  balance 

45% 

More  vacation  time 

36% 

Access  to  new  technology  projects 

36% 

Large  sign-on  bonus 

35% 

More  responsibility 

34% 

More  training 

28% 

New  title 

17% 

Relocation 

17% 

Paid  moving  expenses 

16% 

Complete  career  change 

16% 

Other  factor 

8% 

What  matters  most  to 
you  about  your  job? 


Base  pay 

52% 

Stock  options 

44% 

Potential  for  career  advancement 
and  development 

37% 

Vacation  time/paid  time  off 

33% 

Skills  development/educational 
training  opportunities 

30% 

Job  stability 

29% 

Flexible  work  schedule/ 
telecommuting/working  at  home 

26% 

Working  with  leading-edge  technology  20% 

My  opinion  and  knowledge  is  valued 

18% 

Benefits 

18% 

Corporate  commitment  to  and 
understanding  of  the  importance  of  IT 

15% 

Recognition  for  work  well  done 

Source:  Computerworld's  2005  Salary  Survey 

14% 

PAUL  GLEN 


The  Meaning 
Of  Money 

OVER  THE  PAST  DECADE,  industry  salaries  have  been  on  a  roller¬ 
coaster  ride.  This  year’s  survey  data  shows  a  return  to  level 
ground,  which  makes  this  a  good  time  to  re-evaluate  how  we  think 
about  money.  It  seems  our  love  affair  with  lucre  has  developed 
into  a  bit  of  a  dysfunctional  relationship. 

Now  don’t  get  me  wrong.  I  like  money  as  much  as  the  next 
person  —  and  more  is  better  —  but  I’m  concerned  that  we  may  have  created 
some  misconceptions  about  its  meaning. 

As  a  manager  and  consultant,  I  have  noticed  that  few  issues  elicit  as  much 
emotion  from  technical  staffs  as  salary.  For  a  bunch  of  folks  who  typically  eschew 
emotion,  we  can  get  really  worked  up  about  money.  I’ve  seen  more  tears  and 
screaming  about  it  than  about  any  other  managerial  issue. 


It’s  not  that  we’re  starving.  Few  fully 
employed  people  in  the  IT  industry  are 
filing  for  food  stamps  or  could  qualify 
as  the  working  poor.  And  this  year,  with 
3%  pay  increases,  the  news  is  not  too  bad. 

So  what’s  it  all  about? 

The  problem  is  that  we’ve  allowed 
money  to  become  wrapped  up  with  a 
number  of  other  issues.  We  use  it  as  a  tan¬ 
gible  symbol  for  other  intangible  values. 

Status.  We  use  money  as  an  indicator  of 
social  status.  As  herd  animals,  we  really 
like  to  know  where  we  stand  in  relation  to 
our  peers,  and  money  is  one  key  measure. 

Personal  worth.  We  use  money  as  a  sym¬ 
bol  of  how  much  our  organizations  value 
us.  The  more  they  pay  us,  the  more  they 
must  feel  that  we  are  good  and  valuable 
people. 

Progress.  We  expect  that  income  over  a  career 
should  continually  rise.  As  we  progress,  so  should 
our  value  and  commensurate  compensation. 

Fairness.  Most  important,  we  use  money  as  a  gauge 
of  the  organization’s  fairness.  We  compare  the  value 
we  deliver  and  expect  to  be  reasonably  compensated. 
We  estimate  the  value  that  we  add  compared  with 
our  peers  and  expect  that  each  should  be  compensat¬ 
ed  according  to  his  relative  contribution. 

So  frequently,  when  technical  people,  uncomfort¬ 
able  with  squishy  emotional  things,  feel  undervalued, 
unloved,  abused  or  unfairly  treated,  they  complain 
about  money.  It’s  the  safe,  concrete  way  to  express 
what  they  don’t  like.  It’s  easy  to  say,  “Bob  does  a 
worse  job  than  I  do  but  is  paid  better.  That’s  not  fair.” 
It’s  hard  to  say,  “Why  don’t  you  respect  me  and  my 


contribution  as  much  as  you  do  Bob’s?” 
But  they  are  really  the  same  thing. 

And  that’s  where  the  problem  comes 
in.  Money’s  not  really  about  any  of  those 
things. 

In  aggregate,  how  much  we  get  paid  is 
not  a  function  of  our  moral  worth  but  of 
supply  and  demand.  The  ups  and  downs 
of  salary  numbers  are  based  less  on  the 
value  we  deliver  to  the  organization  and 
more  on  the  fluctuations  of  the  market 
for  people  with  our  talents. 

During  the  boom  years  of  the  ’90s,  I 
hired  young  college  graduates  at  salaries 
in  excess  of  twice  the  average  income 
for  a  family  of  four  in  the  U.S.  When 
they  asked  me  for  career  advice,  I’d 
always  tell  them  the  same  thing:  “Save 
your  money.”  And  they  would  look  at  me 
as  if  I  were  speaking  a  foreign  language. 

“You  don’t  get  paid  this  much  because  you’re 
morally  superior  to  the  janitor.  It’s  just  a  matter  of 
supply  and  demand,  and  at  some  point,  things  will 
change.  Don’t  build  a  lifestyle  around  the  assumption 
that  you  will  always  make  more.  In  fact,  if  you  think 
about  it,  if  the  company  had  to  lose  one  person,  a 
young  programmer  or  the  janitor,  whom  do  you 
think  we’d  miss  first?” 

As  the  market  for  technical  skills  continues  to 
globalize,  we  need  to  get  clear  about  what  money 
really  means.  And  perhaps  more  important,  we 
need  to  get  better  at  expressing  our  feelings  about 
worth  and  values  and  fairness  separately  from  the 
symbol  to  which  we’ve  grown  so  accustomed. 

O  57642 


DON'T  LET 
SPYWARE 
SABOTAGE  YOUR 
ENTERPRISE. 


The  next  threat  is  no  threat  with  Trend  Micro. 

Expose  and  eradicate  spyware  with  Trend  Micro's  Enterprise-class,  multi-level, 
anti-spyware  solutions.  They're  the  only  solutions  that  block  and  clean  at  the  gateway — 
the  most  effective  point  of  control.  Trend  Micro.  #1  global  leader  at  the  gateway  and 
industry  pioneer.  Whether  it's  a  virus,  worm,  spyware,  or  spam,  we've  got  you  covered. 


For  a  FREE  evaluation  and  IDC  whitepaper, 
go  to  www.trendmicro.com/spyware 


TREND 

MICRO 


©2005 Trend  Micro  Inc.  All  rights  reserved.  Trend  Micro  and  the  t-ball  logo  are 
trademarks  or  registered  trademarks  ol  Trend  Micro  Inc.  All  other  company  and/or 
product  names  may  be  trademarks  or  registered  trademarks  of  their  owners. 
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SENIOR  MANAGEMENT  POSITIONS 


ClO/vice 
president 
of  IT 


Average  salary 

$134,405 

Bonus 

$30,017 

Total 

$164,422 

2004  total 

$159,096 


Computer  services/ 
consulting 

$157,779 

Banking 

$139,102 

Manufacturing 

(noncomputer) 

$177,651 

Health  care 

$170,808 

Government 

$115,498 

Finance/accounting 

$191,929 

Legal/insurance/ 
real  estate 

$185,159 

Education 

$117,064 


Chief 

technology 

officer 


Average  salary 

$129,334 

Bonus 

$25,305 

Total 

$154,639 

2004  total 

$154,460 


Director  of 
systems 
development 


Average  salary 

$123,292 

Bonus 

$19,266 

Total 

$142,558 

2004  total 

$138,845 


Director 
of  IT 

operations 


Average  salary 

$95,366 

Bonus 

$12,861 

Total 

$108,227 

2004  total 

$105,144 


Internet 

technology 

strategist 


Average  salary 

$100,867 

Bonus 

$11,159 

Total 

$112,026 

2004  total 

$109,612 


AVERAGE  TOTAL  COMPENSATION  BY  INDUSTRY 


Computer 

services/consulting 

$156,000 

Education* 

$80,333 

Government* 

$88,146 


Computer 

services/consulting 

$125,571 

Finance/accounting* 

$175,737 

Manufacturing 

(noncomputer)* 

$142,997 

Retail  trade* 

$140,408 

Legal/insurance/ 
real  estate* 

$132,446 

Manufacturing 

(computer)* 

$147,946 

Telecommunications 

$157,666 


AVERAGE  TOTAL  COMPENSATION  BY  COMPANY  REVENUE 


Less  than  S100M 

$126,525 

Less  than  $100M 

$131,814 

Less  than  S100M 

$114,830 

Less  than  S100M 

$83,985 

Less  than  S100M 

$83,997 

Less  than  S100M 

$66,230 

Less  than  $100M 

$61,707 

Less  than  $100M 

$84,278 

Less  than  $100M 

$69,442 

S100M  to  S999.9M 

$170,326 

S100M  to  S999.9M 

$174,300 

S100M  to  S999.9M 

$139,305 

S100M  to  S999.9M 

$118,247 

$100M  to  S999.9M 

$99,303 

S100M  to  S999.9M 
$83,951 

S100M  to  J999.9M 

$69,768 

$100M  to  S999.9M 

$94,830 

S100M  to  S999.9M 

$84,224 

$1B  to  $10B 

$211,282 

$1B  to  $10B 

$208,463* 

$1B  to  $10B 

$158,389 

$1B  to  $10B 

$140,001 

$1B  to  $10B 

$125,117 

$18  to  $10B 

$92,640 

$1B  to  $10B 

$80,517 

$1B  to  $10B 

$104,081 

$1B  to  $10B 

$102,641 

More  than  $10B 

$241,921 

More  than  $1QB 

NA 

More  than  $10B 

$157,578 

More  than  $10B 

$162,846 

More  than  $10B 

$125,835 

More  than  $10B* 

$119,818 

More  than  $10B 

$77,111 

More  than  $10B 

$121,424 

More  than  $10B 

$118,639 

MIDDLE  MANAGEMENT  POSITIONS 


Average  salary 

$78,002 

Bonus 

$4,803 

Total 

$82,805 

2004  total 

$80,842 


Help  desk/ 
tech  support 
manager 

Information 

security 

manager 

IT  manager 

3.3% 

3.8% 

3.1% 

Average  salary 

Average  salary 

Average  salary 

$63,640 

$89,384 

$78,453 

Bonus 

Bonus 

Bonus 

$4,397 

$9,364 

$6,931 

Total 

Total 

Total 

$68,037 

$98,748 

$85,384 

2004  total 

2004  tola! 

2004  total 

$65,878 

$95,143 

$82,834 

AVERAGE  TOTAL  COMPENSATION  BY  INDUSTRY - 


Manufacturing 

Computer 

Government 

Education 

Computer 

Manufacturing 

(noncomputer) 

$117,224 

services/consulting 

$120,520 

$84,168 

$51,560 

services/consulting 

$100,100 

(noncomputer) 

$85,213 

Manufacturing 

Computer 

Education 

Education* 

(noncomputer) 

services/consuiting 

Banking* 

Government 

$77,893 

$60,220 

$73,045 

$71,963 

$91,609 

$73,214 

Health  care 

Banking* 

Education* 

Manufacturing 

Government* 

Health  care 

$102,487 

$152,166 

$61,873 

(noncomputer) 

$68,329 

$81,995 

$80,665 

Government 

Energy/utilities* 

Health  care* 

Education 

$88,479 

$88,327 

Health  care 

$61,458 

$92,525 

$62,553 

Legal/insurance/ 

Manufacturing 

(noncomputer)* 

Computer 

real  estate 

Government* 

services/consuiting 

$129,383 

$65,126 

$116,740 

$102,462 

Computer 

Legal/insurance/ 

Legal/insurance/ 

services/consulting 

real  estate* 

real  estate 

$133,147 

$94,680 

$91,927 

Finance/accounting 

Manufacturing 

Finance/accounting 

$132,778 

(computer)* 

$74,315 

$98,343 

Banking 

$96,566 

AVERAGE  TOTAL  COMPENSATION  BY  COMPANY  REVENUE 


%  Average  percentage  increase,  2004-2005 

Gray  text:  The  total  base  for  this  job  title  in  this  particular  industry  or  company  size  was  fewer  than  30  responses  but  more 
than  15.  These  figures  should  be  used  for  comparison  only,  because  they  don't  constitute  a  statistically  significant  sampling. 


Charts  continue  on  page  50 

*  The  total  base  for  this  job  title  in  this  particular  industry  or  company  size  was  fewer 
than  16  responses  but  more  than  nine.  These  figures  should  be  used  for  comparison  only. 


i 

A  SAMPLING  OF  OTHER  JOB  TITLES 

GROWTH  INDUSTRIES 

Largest  increases  in  total 
compensation,  by  industry: 

i 

i 

i 

i 

i 

Chief 

security 

officer 

Director  of 
networks 

Commu¬ 

nications 

manager 

Database 

manager 

Data 

warehousing 

manager 

E-commerce 

manager 

Internet/ 

intranet 

manager 

Commu¬ 

nications 

specialist 

Computer 

operator/lead 

operator 

i 

i 

6% 

2.5% 

2.7% 

2.6% 

2.2% 

1% 

2.9% 

2.8% 

4.4% 

hood/ 

beverages 

4.2% 

i 

i 

i 

Average  salary 

$113,063 

Average  salary 

$114,740 

Average  salary 

$77,210 

Average  salary 

$87,767 

Average  salary 

$95,715 

Average  salary 

$87,770 

Average  salary 

$74,584 

Average  salary 

$59,912 

Average  salary 

$42,871 

Business 

services 

4.1% 

i 

i 

i 

Bonus 

$19,129 

Bonus 

$11,994 

Bonus 

$6,764 

Bonus 

$7,893 

Bonus 

$14,911 

Bonus 

$8,834 

Bonus 

$4,489 

Bonus 

$5,217 

Bonus 

$1,506 

Defense/ 

aerospace 

4% 

i 

i 

i 

i 

Total 

$132,192 

Base:  40 

Total 

$126,734 

Base:  42 

Total 

$83,974 

Base:  130 

Total 

$95,660 

Base:  128 

Total 

$110,626 

Base:  55 

Total 

$96,604 

Base:  35 

Total 

$79,073 

Base:  58 

Total 

$65,129 

Base:  76 

Total 

$44,377 

Base:  36 

Biotechnology/biomedical/ 

pharmaceutical 

4% 

I 

i 

i 

2004  total 

$124,751 

2004  total 

$123,689 

2004  total 

$81,791 

2004  total 
$93,218 

2004  total 

$108,287 

2004  total 

$95,651 

2004  total 

$76,866 

2004  total 

$63,332 

2004  total 

$42,511 

smm 


over  4  billion 


|  '•  i 

i 
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transactions  per  day  for  the  world's  busiest  public  agency. 


At  peak  workloads,  that's  51,448  transactions  per  second  executed  without  a  glitch 
when  CA  software  automates  systems  and  processes.  If  your  enterprise  needs  to  manage 
critical  business  transactions  across  platforms,  around  the  world,  with  this  kind  of  speed 
and  reliability,  call  a  CA  representative  at  1-888-423-1000  or  visit  ca.com/didyouknow. 


©  2005  Computer  Associates  International,  Inc.  (CA).  Ail  rights  reserved. 
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MIDDLE  MANAGEMENT  POSITIONS 


STAFF  AND  ENTRY-LEVEL  POSITIONS 


Network 

manager 

Product 

manager 

Application 

development 

manager 

Project  Bfl 
manager 

Database 

administrator 

Help  desk/ 
tech  support 
specialist 

Information 

security 

specialist 

Technology/ 

business 

analyst 

Network 

administrator 

Network 

engineer 

Programmer/ 

analyst 

3.9% 

2.7% 

3.1% 

2.4%  H 

1.7% 

2% 

4.2% 

2.8% 

3% 

2.2% 

2.4% 

Average  salary 

Average  salary 

Average  salary 

Average  salary  i, 

Average  salary 

Average  salary 

Average  salary 

Average  salary 

Average  salary 

Average  salary 

Average  salary 

$65,991 

$89,461 

$93,029 

$86,829  9 

$77,834 

$46,569 

$74,645 

$69,141 

$51,681 

$67,124 

$64,708 

Bonus 

Bonus 

Bonus 

Bonus  J 

Bonus 

Bonus 

Bonus 

Bonus 

Bonus 

Bonus 

Bonus 

$2,831 

$10,105 

$7,812 

$8,151  J 

$4,717 

$1,864 

$6,390 

$4,804 

$2,603 

$3,241 

$2,977 

Total 

Total 

Total 

mmmm 

Total 

Total 

Total 

Total 

Total 

Total 

Total 

$68,822 

$99,566 

$100,841 

$94,980  J 

$82,551 

$48,433 

$81,035 

$73,945 

$54,284 

$70,365 

$67,685 

2004  total 

2004  total 

2004  total 

2004  total  ® 

2004  total 

2004  total 

2004  total 

2004  total 

2004  total 

2004  total 

2004  totai 

$66,214 

$96,984 

$97,778 

$92,730  l 

$81,152 

$47,464 

$77,767 

$71,949 

$52,712 

$68,830 

$66,068 

AVLKAbL  IUIAL  LUMrtNoAMUN  HY  INUUolKY  : 

mv  cnMut  i  u  i  ml  i/Uiviri:noMi  lun  dt  muuoini 

Education 

Computer 

Computer 

Computer  1 

Computer 

Government 

Computer 

Computer 

Manufacturing 

Computer 

Legal/insurance/ 

$55,053 

services/consulting 

$97,542 

services/consulting 

$103,928 

services/consulting  | 

$99,746  « 

services/consulting 

$82,800 

$50,357 

services/consultfng 

$86,898 

services/consulting 

$82,670 

(noncomputer) 

$52,690 

services/consulting 

$63,527 

real  estate 

$68,223 

Government 

Computer 

$65,835 

Manufacturing 

Manufacturing 

Manufacturing  | 

Government 

services/consulting 

Government 

Manufacturing 

Government 

Telecommunications 

Government 

(computer) 

$117,238 

(noncomputer) 

$99,189 

(noncomputer)  j 

$92,500  g 

j 

$70,026 

$48,815 

$76,992 

(noncomputer) 

$74,217 

$57,207 

$75,815 

$63,286 

Manufacturing 

(noncomputer) 

Manufacturing 

Education 

Banking 

Education 

Government 

Computer 

$75,616 

Health  care* 

$91,100 

Government 

$86,392 

Government  « 

$84,849  | 

(noncomputer) 

$75,739 

$39,003 

$73,761 

Government 

$67,456 

$45,340 

$67,959 

services/consulting 

$67,236 

Health  care 

Manufacturing 

Finance/accounting* 

Health  care 

Health  care 

$71,863 

Health  care 

Health  care  : 

Legal/insurance/ 

(noncomputer) 

$92,370 

Legal/insurance/ 

$53,065 

$70,044 

Manufacturing 

$98,135 

$87,559  J 

real  estate 

$45,880 

real  estate 

(noncomputer) 

Legal/insurance/ 

$85,282 

Legal/insurance/ 

$71,490 

Computer 

Manufacturing 

$66,499 

real  estate* 

Finance/accounting 

Legal/insurance/  " 

Legal/insurance/ 

real  estate* 

services/consulting 

(noncomputer) 

$67,032 

$104,253 

real  estate  « 

$93,810  J 

Health  care 

$85,687 

real  estate 

$53,493 

$75,517 

Health  care 

$64,051 

$56,055 

$69,881 

Health  care 

$62,801 

Legal/insurance/ 

Defense/aerospace* 

Legal/insurance/ 

Education* 

real  estate 

Manufacturing  1 

Education 

Health  care 

$104,210 

Education 

real  estate 

$54,434 

Education 

$96,841 

(computer)  | 

$60,374 

$39,883 

$58,124 

$59,353 

$53,886 

$108,951  5 

Health  care* 

Defense/aerospace* 

Banking 

Finance/accounting 

Manufacturing 

$64,960 

Energy/utilities 

Nonprofit 

$81,771 

Banking 

$105,749 

Telecommunications  | 

$103,267 

(computer) 

$76,963 

$47,402 

$67,775 

$104,594  1 

1 

$71,608 

Banking* 

Banking 

$75,333 

Finance/accounting 

1 

$71,518 

$78,634 

1 

AWCRAfiF  THTAI  PHMDFklQ ATIOkl  RV  PHMDANV  PCWCMIIIC  ■ 

AM 

r n  *  r* r  tot»  i  pa 

kinr*npiiTin&i  nu  , 

nnuni  nu  nrwrm 

1 1  r*  _ 

AvcKAbt  IUIAL  UUMrtNoAIIUN  dY  UUMrANY  KtvtNUb  jj 

mv ciiHuc  i  u  i ml  oumrcnoMiiun  dt  uumrMni  ncvcnuc 

Less  than  S100M 

Less  than  35100M 

Less  than  S100M 

i 

Less  than  $1Q0M  | 

Less  than  $100M 

Less  than  $100M 

Less  than  $100M 

Less  than  S100M 

Less  than  S100M 

Less  than  S100M 

Less  than  S100M 

$59,467 

$86,511 

$88,007 

$84,238  1 

■ 

$68,294 

$41,399 

$70,080 

$60,409 

$50,784 

$64,243 

$60,862 

S100M  to  S999.9M 

$100M  to  S999.9M 

$100M  to  S999.9M 

$100Mto$999.9M  j 

$100M  to  S999.9M 

$100M  to  S999.9M 

$100M  to  S999.9M 

S100M  to  S999.9M 

S100M  to  S999.9M 

S100M  to  S999.9M 

S100M  to  S999.9M 

$71,082 

$101,220 

$99,441 

$92,667  5 

$1B  to  $10B  l 

$84,583 

$48,278 

$80,421 

$71,039 

$57,350 

$68,937 

$66,119 

$1B  to  $10B 

$1B  to  $10B 

$1B  to  $10B 

$1B  to  $10B 

$1B  to  $10B 

SIB  to  $10B 

SIB  to  S10B 

SIB  to  S10B 

SIB  to  S10B 

SIB  to  S10B 

$84,476 

$102,938 

$106,944 

$97,301  j 

$90,714 

$58,625 

$80,458 

$80,452 

$63,544 

$79,053 

$73,760 

More  than  $10B* 

More  than  $10B 

More  than  $10B 

More  than  $10B  ij 

More  than  $10B 

More  than  $10B 

More  than  S10B 

More  than  S10B 

More  than  S10B 

More  than  $10B 

More  than  S10B 

$103,147 

$109,252 

$114,691 

$104,616  9 

$92,355 

$62,697 

$92,241 

$86,527 

$66,617 

$74,838 

$77,800 

°/o  Average  percentage  increase,  2004-2005 

Gray  text:  The  total  base  for  this  job  title  in  this  particular  industry  or  company  size  was  fewer  than  30  responses  but  more 
than  15.  These  figures  should  be  used  for  comparison  only,  because  they  don't  constitute  a  statistically  significant  sampling. 


Charts  continue  on  page  52 


*  The  total  base  for  this  job  title  in  this  particular  industry  or  company  size  was  fewer 
than  16  responses  but  more  than  nine.  These  figures  should  be  used  for  comparison  only. 


A  SAMPLING  OF  OTHER  JOB  TITLES 

r- 

i 
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Database 

analyst 

Database 

architect 

Database 

developer/ 

modeler 

E-commerce 

specialist 

E-mail/ 

groupware 

specialist 

Network 

architect 

Quality 

assurance 

specialist 

Technical 

trainer 

Webmaster 

i 

i 

i 

i 

i 

SLOW  INDUSTRIES 

Smallest  increases  in  total 

2.1% 

2.6% 

0.2% 

3.6% 

2.5% 

2.9% 

3.5% 

2.7% 

3.2% 

i 

i 

uumpeiibdiiun,  uy  iiiuum 

iy- 

Average  salary 
$60,060 

Average  salary 

$94,939 

Average  salary 

$74,187 

Average  salary 

$71,281 

Average  salary 

$74,256 

Average  salary 

$86,039 

Average  salary 

$66,942 

Average  salary 

$53,689 

Average  salary 

$54,813 

i 

i 

i 

Telecommunications 

2% 

Bonus 

56,052 

Bonus 

$11,557 

Bonus 

$6,457 

Bonus 

$7,629 

Bonus 

$8,036 

Bonus 

$8,161 

Bonus 

$4,608 

Bonus 

$1,723 

Bonus 

$2,371 

i 

i 

i 

IT/computer-related 

services 

1.9% 

Total 

$66,112 

Base:  69 

Total 

$106,496 

Base:  55 

Total 

$80,644 

Base:  47 

Total 

$78,910 

Base:  34 

Total 

$82,292 

Base:  37 

Total 

$94,200 

Base:  46 

Total 

$71,550 

Base:  86 

Total 

$55,412 

Base:  60 

Total 

$57,184 

Base:  63 

i 

i 

i 

i 

Computer  dealer/ 
reseller 

1.9% 

2004  total 

$64,767 

2004  total 

$103,785 

2004  total 

$80,457 

2004  total 

$76,203 

2004  total 

$80,251 

2004  total 

$91,580 

2004  total 

$69,150 

2004  total 

$53,936 

2004  total 
$55,402 

i 

i 

i 

Mining/agriculture/ 

construction/engineering 

1.8% 

Innovations  by  InterSystems 


Easy  database  administration  Massive  scalability  on  minimal  hardware 


The  Objects  Of  Your  Desire. 

Cache  is  the  first  multidimensional  database  for  transaction  processing  and  real-time  analytics.  Its 
post- relational  technology  combines  robust  objects  and  robust  SQL,  thus  eliminating  object-relational 
mapping.  It  delivers  massive  scalability  on  minimal  hardware,  requires  little  administration,  and 
incorporates  a  rapid  application  development  environment. 

These  innovations  mean  faster  time-to-market,  lower  cost  of  operations,  and  higher  application 
performance.  We  back  these  claims  with  this  money-back  guarantee:  Buy  Cache  for  new  application 
development,  and  for  up  to  one  year  you  can  return  the  license  for  a  full  refund  if  you  are  unhappy  for  any 
reason.*  Cache  is  available  for  Unix,  Linux,  Windows,  Mac  OS  X,  and  Open  VMS  -  and  it's  deployed 
on  more  than  100,000  systems  ranging  from  two  to  over  50,000  users.  We  are  InterSystems,  a  global 
software  company  with  a  track  record  of  innovation  for  more  than  25  years. 

InterSystems  f 

CACHE 

Try  an  innovative  database  for  free:  Download  a  fully  functional,  non-expiring  copy  of  Cache,  or  request  it  on  CD,  at  www.InterSystems.com/Cachel7A 


*  Read  about  our  money-back  guarantee  at  the  web  page  shown  above. 

©  2005  InterSystems  Corporation.  ASS  rights  reserved.  InterSystems  Cache  is  a  registered  trademark  of  InterSystems  Corporation.  10-05  CacheInnol7CoWo 
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SALARY 

SURVEY 


2005 


STAFF  AND  ENTRY-LEVEL  POSITIONS 

Project 

leader 

Software 

developer 

Software 

engineer 

Systems 

administrator 

Systems 

architect 

Systems 

programmer 

Systems 

analyst 

Senior 

systems 

analyst 

Technician 

Web 

developer 

3.5% 

2.6% 

3.3% 

2.7  % 

2.8% 

3.2% 

2.7% 

1.9% 

2.8% 

2.5% 

Average  salary 

576,519 

Average  salary 

$72,638 

Average  salary 

578,833 

Average  salary 

562,606 

Average  salary 

593,242 

Average  salary 

578,925 

Average  salary 

$60,986 

Average  salary 

577,430 

Average  salary 

$43,283 

Average  salary 

$57,017 

Bonus 

$6,882 

Bonus 

55,082 

Bonus 

54,332 

Bonus 

53,174 

Bonus 

58,439 

Bonus 

$6,677 

Bonus 

$3,607 

Bonus 

$4,075 

Bonus 

$3,805 

Bonus 

$4,061 

Total 

583,401 

Total 

$77,720 

Total 

583,165 

Total 

565,780 

Total 

$101,681 

Total 

585,602 

Total 

564,593 

Total 

$81,505 

Total 

$47,088 

Total 

$61,078 

2004  total 

580,551 

2004  total 

575,733 

2004  total 

$80,519 

2004  total 

564,055 

2004  total 

$98,888 

2004  total 

582,956 

2004  total 

$62,879 

2004  total 

$79,951 

2004  total 

$45,787 

2004  total 

$59,606 

AVERAGE  TOTAL  COMPENSATION  BY  INDUSTRY 


Computer 

Computer 

Computer 

Manufacturing 

Computer 

Legal/insurance/ 

Health  care 

Manufacturing 

Education 

Computer 

services/consulting 

$80,498 

services/consulting 

$65,193 

services/consulting 

$81,636 

(noncomputer) 

$64,865 

services/consulting 

$100,209 

real  estate 

$87,588 

$58,981 

(noncomputer) 

$79,957 

$37,210 

services/consulting 

$68,249 

Manufacturing 

Computer 

Manufacturing 

(noncomputer) 

Legal/insurance/ 

Defense/aerospace 

Education 

Telecommunications 

Computer 

(noncomputer) 

Computer 

services/consultinq 

Education 

real  estate 

$73,449 

$84,917 

550,204 

$106,742 

services/consulting 

$94,617 

$66,084 

services/consulting 

$82,687 

$43,892 

$43,846 

$71,177 

Manufacturing 

Computer 

Defense/aerospace 

Legal/insurance/ 

Health  care 

Government* 

Legal/insurance/ 

Manufacturing 

(computer) 

services/consulting 

$111,696 

Banking* 

real  estate 

Government 

$53,108 

$62,121 

real  estate 

(computer) 

$94,315 

$72,987 

$87,283 

$72,792 

$74,553 

$97,056 

$95,454 

Manufacturing 

Government 

Health  care* 

Telecommunications 

Government 

(computer) 

Government* 

Government 

Legal/insurance/ 

$46,824 

$55,957 

Government 

Finance/accounting 

$89,605 

$67,595 

$122,284 

$71,030 

$61,454 

real  estate 

$73,409 

$98,685 

$77,869 

Manufacturing 

Manufacturing 

Manufacturing 

Health  care 

Legal/insurance/ 

Computer 

(noncomputer) 

(noncomputer)* 

Defense/aerospace* 

$94,331 

Health  care 

574,896 

(noncomputer) 

$79,169 

$66,412 

real  estate 

$98,213 

services/consulting 

$66,435 

Banking 

$79,853 

$50,438 

$60,367 

Legal/insurance/ 

Telecommunications* 

Finance/accounting* 

Finance/accounting* 

Manufacturing 

Legal/insurance/ 

real  estate 

Banking 

Education 

Health  care 

$55,010 

$76,124 

$89,703 

(noncomputer) 

$69,447 

real  estate 

$80,205 

$70,584 

$97,427 

$53,667 

$78,056 

Manufacturing 

Entertainment/ 

Finance/accounting 

Oefense/aerospace* 

Finance/accounting 

(computer)* 

$99,633 

Government* 

$73,309 

Finance/accounting 

$84,602 

advertising 

$56,492 

$110,578 

$71,056 

589,562 

Government 

Banking* 

Energy/utilities 

$100,977 

$76,766 

$80,500 

AVERAGE  TOTAL  COMPENSATION  BY  COMPANY  REVENUE 


Less  than  S100M 

$73,807 

Less  than  $100M 

$68,711 

Less  than  S100M 

$81,535 

Less  than  $100M 

$58,497 

Less  than  $100M 

$89,292 

Less  than  S100M 

$77,312 

Less  than  S100M 

$59,170 

Less  than  S100M 

$71,074 

Less  than  S100M 

$43,153 

Less  than  S100M 

$51,975 

$100M  to  S999.9M 

$77,428 

$100M  to  S999.9M 

$76,150 

$1QQM  to  S999.9M 

$81,846 

S10QM  to  S999.9M 

$66,726 

$100M  to  S999.9M 

$98,722 

$100M  to  S999.9M 

$90,181 

S100M  to  S999.9M 

$60,545 

S100M  to  S999.9M 

$81,453 

S100M  to  S999.9M 

$44,193 

S100M  to  S999.9M 

$64,108 

$1B  to  $10B 

$85,768 

SIB  to  S10B 

582,014 

SIB  to  S10B 

$82,895 

SIB  to  S10B 

$73,947 

SIBtoSlOB 

$103,389 

SIBtoSlOB 

$86,966 

SIBtoSlOB 

$70,541 

SIBtoSlOB 

$83,162 

SIBtoSlOB 

$52,490 

SIBtoSlOB 

$74,809 

More  than  $10B 

593,963 

More  than  S10B 

$91,957 

More  than  S10B 

$87,615 

More  than  S10B 

$81,486 

More  than  S10B 

$108,513 

More  than  $10B 

$86,966 

More  than  S10B 

$72,099 

More  than  $103 

$91,514 

More  than  S10B 

$65,030 

More  than  S10B* 

$76,096 

%  Average  percentage  increase,  2004-2005 

Gray  text:  The  total  base  for  this  job  title  in  this  particular  industry  or  company  size  was  fewer  than  30  responses  but  more  *  The  total  base  for  this  job  title  in  this  particular  industry  or  company  size  was  fewer 

than  15.  These  figures  should  be  used  for  comparison  only,  because  they  don’t  constitute  a  statistically  significant  sampling.  than  16  responses  but  more  than  nine.  These  figures  should  be  used  for  comparison  only. 


Methodology 


Computerworld’s  19th  Annual  Salary  Survey  was 

administered  via  the  Internet.  Responses 
from  both  Computer-world  print  subscribers 
and  visitors  to  Computerworld.com  were 
included  in  the  survey  results. 

The  collection  of  survey  data  began 
May  3  and  concluded  June  30,  2005.  A  total 
of  15,988  people  responded  to  the  survey. 

Of  those  respondents,  14,253  were  employed 
full  or  part  time  and  were  eligible  to  com¬ 
plete  the  entire  survey. 

At  the  95%  confidence  level,  the  margin 


of  error  for  this  sample  size  is  less  than  +/-1 
percentage  point. 

Respondents  were  asked  to  report  the 
percentage  change  in  their  compensation 
for  2004  to  2005.  Compensation  figures  for 
2004  were  calculated  based  on  the  percent¬ 
age  change  reported  by  the  respondents.  I 


Aill  Ilir  For  a  detailed  look  at  how  we  conducted  this 
URLIIiL  survey,  visit  our  Web  site: 

QuickLink  56954 
www.computerworld.com 


WHO  THEY  ARE 

Eight-two  percent  of  the  respondents 
were  men,  89%  were  employed  full 
time,  and  46%  said  a  bachelor’s 
degree  was  their  highest  level  of 
education.  The  respondents  had  an 
average  of  15  years  in  IT,  and  their 
average  age  was  42.  Forty-three 
percent  indicated  that  they  had  some 
level  of  certification. 

Forty-nine  percent  of  our  respon¬ 
dents  indicated  that  they  were  in 
management,  and  51%  said  they 


held  staff  or  technical  positions.  Four 
percent  said  they  were  employed  as 
contractors  or  consultants.  The  most 
well-represented  industry  was  IT 
services,  with  13%  saying  they 
worked  in  that  field.  Eight-four  per¬ 
cent  reported  that  they  held  the  same 
job  last  year. 

More  than  19%  of  the  respondents 
said  they  reside  in  the  South  Atlantic 
U.S.,  and  another  19%  reported 
living  in  the  Central  U.S.,  making 
those  geographic  regions  the  best- 
represented. 
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Millions  of  fans.  Thirty  teams.  One  passion.  And  24/7  access  to  it  all  through  MLB.com.  As  the  official 

• 

site  of  Major  League  Baseball,  MLB.com  is  the  richest,  deepest  source  of  original  baseball  news  and 
highlights  on  the  Internet.  SAS  is  proud  to  provide  the  state-of-the-art  business  intelligence  and  analytics 

software  that’s  helping  Major  League  Baseball  enrich  the  interactive  experience  for  the  hundreds  of 

'  '  '  • 

millions  of  visitors  who  make  MLB.com  such  a  big  hit.  To  learn  more  about  MLB.com  and  other  SAS 
success  stories  that  go  Beyond  Bl,  visit  our  Web  site.  ,  w  \ 
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STILL  FEELING  THE  PINCH 

Respondents  reported  that  in  the  past 
year,  their  working  conditions  have 
been  significantly  affected  by: 

Increased  workload  due  to  staff  cuts  53% 
Budget  cuts  50% 


Permanent  staff  layoffs 

31% 

Hiring  freeze 

30% 

Salary  freeze 

27% 

Training  cuts 

CO 

CM 

Canceled  projects 

24% 

Increased  outsourcing 

24% 

Contract  staff  layoffs 

15% 

Contract/consultant  hires 

12% 

Increased  hiring/staffing 

10% 

Decreased  outsourcing 

2% 

SECURITY  BLANKET 

We  asked  respondents  how  secure 
they’re  feeling  in  their  jobs: 

Very  secure 

23% 

Secure 

34% 

Level  of  job  security  hasn’t 
changed  from  one  year  ago 

57% 

More  secure  than  last  year 

22% 

Less  secure  than  last  year 

16% 

Source:  Computerworld's  2005  Salary  Survey 

JOHANNA  ROTHMAN 

Spark  Your  Salary 

There’S  some  good  news  in  this  year’s  salary  survey.  Salaries  are  up  (a 
little),  bonuses  are  up  (a  little)  and  the  effects  of  layoffs,  hiring  freezes  and 
outsourcing  are  all  down  —  a  little.  And  training  budgets  look  as  if  they 
may  be  coming  back  a  bit. 

If  you’re  like  me,  these  small  gains  are  something  to  be  happy  about. 
We’re  not  back  in  the  boom  times  of  the  late  ’90s,  when,  if  you  could  spell 


computer,  you  were  qualified  to  be  a  de¬ 
veloper  or  a  tester  or,  even  worse,  a  man¬ 
ager.  And  between  the  slight  increases 
in  hiring  and  training  and  the  decrease 
in  layoffs,  the  current  jobs  may  be  more 
interesting  to  employees  and  more  valu¬ 
able  to  employers. 

If  you  review  the  areas  of  greatest 
increases,  you’ll  see  that  employers  are 
paying  more  for  people  who  know  about 
security.  Employers  do  pay  more  for  peo¬ 
ple  with  a  greater  span  of  technical  skills, 
and  security  (as  well  as  performance  and 
reliability)  is  a  functional  skill  whose 
time  has  come.  (And  no,  I  have  no  idea 
how  long  this  will  last,  but  as  long  as  we 
continue  to  gather  ever  more  personal 
data,  we  will  need  more  people  to  think 
about  and  implement  good  security.) 

Some  of  you  may  be  thinking,  “Oh  nuts,  just  a 
3%  raise.  That’s  not  much.”  You’re  right.  That  3% 
is  lagging  the  national  average  for  the  fourth  year  in 
a  row.  But  here’s  a  little  perspective.  According  to 
EconEdLink.org,  annual  inflation  rates  in  2002, 2003 
and  2004  were  1.6%,  2.3%  and  2.7%,  respectively.  If 
you  received  a  3%  raise  for  your  2004  work,  you  beat 
inflation.  Not  by  much,  but  beating  inflation  is  better 
than  seeing  your  spending  power  decrease.  And  if 
you  received  a  bonus,  your  wages  did  increase. 

So  my  next  question  is,  Are  relatively  flat  salaries 
normal?  The  answer,  of  course,  is,  It  depends. 

Salaries  are  dependent  on  people  adding  value  to 
their  companies  to  rev  up  innovation.  And  salaries 
are  dependent  on  employers  considering  areas  of 
innovation.  Whenever  you  have  innovation,  salaries 
(eventually)  rise.  Salary  increases  across  the  industry 
are  a  lagging  indicator  of  a  disruptive  change.  Local 
salary  increases  are  a  lagging  indicator  of  an  organi¬ 
zation  performing  well,  relative  to  its  competitors. 

If  you’re  doing  the  same  old,  same  old,  don’t  ex¬ 
pect  an  increase  in  salary.  Be  more  concerned  that 
your  organization  will  cut  costs  in  some  way. 

And,  of  course,  the  size  of  salary  increases  isn’t 
the  only  cause  for  concern  in  the  survey  results.  Al¬ 
though  people  are  feeling  more  secure  in  their  jobs, 
I’m  worried  about  the  emotional  cost  of  that  feeling 
of  security.  More  people  are  trying  to  do  more  work 
with  fewer  employees,  something  that’s  been  going 
on  for  a  few  years.  And  even  though  the  percentage 
of  respondents  who  said  they  found  their  jobs  stress¬ 


ful  was  lower  this  year  (47%)  than  it  was 
last  year  (52%),  that’s  still  a  lot  of  people 
feeling  stressed. 

If  innovation  is  key  to  improved  rev¬ 
enue,  which  is  the  key  to  higher  salaries, 
people  need  time  to  think.  And  if  they’re 
trying  to  do  the  work  of  more  than  one 
person,  they  don’t  have  the  time. 

Money  is  a  funny  thing  when  it  comes 
to  morale.  If  you’re  underpaid  (compared 
with  your  organization  and  industry), 
your  morale  will  suffer  until  you  find  a 
new  job  with  a  competitive  salary.  But  if 
you  feel  you’re  paid  fairly,  money  doesn’t 
motivate  you  as  much  as  it  could.  What 
does  motivate  people  is  the  respect  of 
their  peers  and  their  manager  and  a  good 
relationship  with  their  manager. 

When  I  look  at  the  percentages  of  re¬ 
spondents  who  said  they  were  significantly  affected 
by  budget  cuts  (50%),  layoffs  (31%)  and  hiring  freezes 
(30%),  I  see  people  who  find  it  challenging  to  develop 
collegial  relationships  with  peers  and  managers.  That 
situation  may  make  it  difficult  to  appeal  to  people’s 
intrinsic  motivation  to  perform  great  work. 

So  I  have  some  suggestions.  Whether  you’re  a 
manager  or  a  technical  contributor,  take  a  long,  hard 
look  at  your  work.  First,  make  sure  all  the  work  you 
do  is  required  by  the  organization.  Too  often,  we 
continue  to  perform  work  that’s  no  longer  needed  — 
or  at  least  no  longer  needed  to  be  performed  by  us. 

Second,  ask  yourself  if  you’re  doing  work  that’s 
fundamentally  the  same  work  you  did  last  year.  If  so, 
what  kinds  of  additional  technical  skills  would  you 
need  to  acquire  to  change  how  you  do  the  work? 
Work  with  your  manager  to  develop  an  action  plan 
to  see  how  to  increase  your  technical  skills  so  you 
can  perform  work  of  more  value  to  the  organization. 

Third,  remember  that  innovation  arises  from  all  of 
us.  If  you  have  an  idea  about  how  the  work  could  be 
done  better  or  an  idea  about  a  new  project  that  could 
be  undertaken,  make  sure  you  raise  those  ideas,  no 
matter  where  you  are  in  the  organization. 

The  good  news  about  the  salary  survey  is  that 
there’s  no  bad  news.  It’s  up  to  us  to  move  out  of  the 
doldrums  in  our  organizations  and  create  our  new  fu¬ 
tures.  Take  a  little  time  and  think  strategically  about 
your  work.  You’ll  see  how  to  work  differently  and  cre¬ 
ate  more  value  for  the  organization.  Once  you  do,  your 
salary  will  rise.  And  that  will  be  great  news.  O  57475 


JOHANNA  ROTHMAN 

is  a  consultant  and  the 
author  of  Hiring  the  Best 
Knowledge  Workers, 
Techies  &  Nerds.  You 
can  reach  her  at  jr® 
irothman.com  or  by  visit¬ 
ing  wvm.irothman.com. 


Dashboard  delivers  a  visual  snapshot 
of  entire  SAN  fabric  performance. 


Welcome  to  a  network  tool  so  smart,  it's  almost  unreal.  NetWisdom.  The  intelligent  SAN  performance 
monitoring  solution  that  keeps  you  one  step  ahead  of  trouble. 

Instantly  measure  SAN  performance  against  the  baseline  to  verify  you're  meeting  internal  service 
objectives.  The  exclusive  'visual  dashboard'  displays  real-time  health  of  the  entire  fabric.  And  if  your 
SAN  stumbles,  you  can  quickly  identify  and  engage  the  vendor  at  fault,  to  drive  swift  problem  resolution. 

Understand.  Identify.  Resolve.  Fast.  With  the  NetWisdom  SAN  performance  monitoring  solution. 

Get  more  details  during  a  free  webinar,  "Improving  SAN  Performance  and  Uptime  with  NetWisdom." 
Sign  up  now  at  http://finisarevents.webex.com 
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Virtualizing  NAS?  Expand  Your  Pool. 
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Not  all  virtualization  solutions  are  equal. 

Most  include  limitations  and  introduce  a  single  mount  point, 
performance  bottleneck,  data  integrity  risk  or  are  limited  to  a 
small  storage  pool. 

With  EMC,  you  get  NAS  virtualization  without  limitations. 
EMC  Rainfinity  deploys  easily  with  no  management 
headaches,  no  risks,  and  includes  specific  applications  that 
identify  and  resolve  issues.  The  result?  You  will 
dramatically  simplify  storage  management,  increase  capacity 
utilization,  improve  performance,  better  leverage  storage 
tiers,  and  lower  TCO. 

But  don't  take  our  word  for  it.  The  Taneja  Group  has  defined 
the  criteria  for  evaluating  virtualization  solutions.  Receive  a 
FREE  copy  of  "Evaluating  Network  File  Management 
Solutions  "  today  at  www.rainfinity.com/Taneja. 


EMC' 


Rainfinity" 


Optimizing  Storage  with 
Global  File  Virtualization 
www.  rainfinity.  com 


Reach  Respected  IT  Leaders  in 

COMPUTERWORLD 
Marketplace  Advertising  Section 

The  Computerworld  Marketplace  advertising  section  reaches  more  than 
1.8  million  IT  decision  makers  every  week.  Marketplace  advertising  helps 
Computerworld  readers  compare  prices,  search  for  the  best  values,  locate 
new  suppliers  and  find  new  products  and  services  for  their  IT  needs. 


To  advertise,  call  212-655-5157 
or  visit  us  at  www.venturedirect.com 
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Backups.  Snapshots.  SRM.  Compliance.  D/R... 

Are  your  point  products  less 
friendly  than  they  look? 

CommVault  software  lets  you  deploy  individual  products  or  seamlessly 
integrate  new  ones  at  a  fraction  of  the  time,  effort  and  money  required 
by  separate  point  solutions. 

Learn  more  at  commvault.com  or  call  us  at  732.870.4000. 

CommVault 

Unified  Data  Management" 


Marlabs,  Inc  is  a  Edison,  NJ  based  software  consulting  company.  The 
candidates  will  be  assigned  to  work  at  client  sites  across  the  US.  We  have 
multiple  openings  for  Software  Professionals  (Project  Managers  /  Team 
Leads  /  Software  Engineers.  Programmer  Analysts,  System/Network 
Analysts  and  Administrators,  Database  Administrators  and  Application 
Developers,  System  and  Business  Analysts,  Quality  Assurance/testing) 
with  several  of  the  following  skills  and  relevant  experience: 

Web  Technologies: 

Web  Tools  such  as  J2EE,  Java,  JSP,  Java  Servlets,  EJB,  XML, .NET, 
HTML,  DHTML,  UML,  ASP,  Visual  Interdev,  MTS,  &  PERL/CGI. 

Web  Application  Servers  such  asWebObjects,  SUN  JES,  Web  Logic, 
WebSphere,  ColdFusion,  ATG,  Netscape,  IIS  &  IBOLT. 

Internet,  Intranet  and  other  Web  technologies  and  applications  -  including 
Architecture,  Server-Side  and  Middle-Tier  development. 

Application  development: 

Application  Development  integrating  database  backend,  a  middle  tier 
server  and  a  GUI/Web  interface. 

Object  Oriented  Application  development  using  technologies  such  as  C, 
C++.  C##,  Java,  etc. 

Statistical  Applications  such  as  SAS/SPSS. 

Development  Tools  such  as  C,  C++,  Visual  Studio,  Visual  C++,  Visual 
Basic,  PowerBuilder,  Lotus  Notes  &  .NET  (including  VB.NET,  ASP.NET 
and  C##.NET). 

Data  Mining  /  Data  Warehousing/Business  Intelligence  using  applications 
such  as  Business  Objects,  SAS,  Brio,  Informatics,  Microstrategy,  Statis¬ 
tics,  Eagle  Pace,  Cognos  &  ERWIN. 

ERP/CRM:  Oracle  Applications,  Siebel,  Peoplesoft,  Broadvision  &  SAP, 
Peoplesoft,  BAAN,  JD  Edwards,  Microsoft/Great  Plains. 

Databases:  (mainframe/midrange/client-server)  Oracle,  Informix,  Sy¬ 
base,  SQL  Server,  MySQL,  DB2  and  Cobol. 

Systems  Administrators  with  Experience  in  several  of  the  following: 
System  (UNIX,  Windows  /  Windows  NT,  LINUX,  Sun  Solaris,  AIX,  HP):; 
Network  (LANA/VAN/  CISCO/HP)  Administratorion,  Security  Analysis  and 
Design,  Database  Administration;, 

Business  Analysts,  and  Quality  Assurance  professionals  for  any  or  all  of 
the  above  technologies  and  various  industry  sectors  such  as  business, 
finance,  telecom,  pharmaceutical  etc.  Also  specialists  in  regulatory  /  statu¬ 
tory  compliance  such  HIPAAor  SarbOx,  business  analysis,  security/audit 
policy,  certification  and/or  accreditation. 

All  positions  require  Bachelor's  or  equivalent  and  2-5  years  of  industry 
experience,  or  a  Master's  degree.  Edn  must  be  Engg,  CompSci,  CIS, 
Science,  Math,  Business,  or  related.  Relocation  possible  to  client  loca¬ 
tion  which  may  be  anywhere  in  the  continental  US.:Submit  resume  to: 
Marlabs,  Inc.  Attn:  HR,  2025  Lincoln  Hwy,  Ste  110,  Edison,  NJ  08817.. 
All  responses  to  this  ad  must  include  the  Job  Code  reference  1601. 
Marlabs  is  an  equal  opportunity  employer. 


Computer  and 
Information  Scientist 

This  position  requires  the  re¬ 
search,  invention,  design  and 
development  of  innovative  com¬ 
puter  software  technology  for 
deployment  in  telephony,  multi- 
media,  and  internet  initiatives; 
the  identification,  creation,  and 
development  of  new  combina¬ 
tions  of  technology,  program¬ 
ming  approaches  and  theories 
to  solve  problems  in  the  field  of 
computer  software  and  related 
hardware;  analysis  of  problems 
to  develop  solutions  involving 
computer  hardware  and  soft¬ 
ware;  consultation  with  users, 
management,  vendors,  and 
technicians  to  determine  com¬ 
puting  needs  and  system  re¬ 
quirements;  the  conduct  of  logi¬ 
cal  analyses  of  business,  scien¬ 
tific,  engineering  and  other  tech¬ 
nical  problems,  formulating 
mathematical  models  of  prob¬ 
lems  for  solutions  by  computers; 
evaluate  project  plans  and  pro¬ 
posals  to  assess  feasibility 
issues;  responsibility  for  deter¬ 
mining  the  appropriate  program¬ 
ming  languages  and  methodolo¬ 
gies,  including  the  creation  of 
new  methodologies,  to  achieve 
the  desired  results;  proficiency 
in  Java,  C+,  C++,  Visual  Studio- 
.Net,  HTML,  audio  CoDecs, 
video  CoDecs,  JavaScript,, 
Sybase,  MSSQL,  MySQL,  and 
ASP.Net  and  an  understanding 
of  wireless,  internet  capable 
device  protocols.  Ph.D  degree  in 
Computer  Science  or  equivalent 
field,  or  Masters  Degree  in 
Computer  Science  or  equivalent 
field  plus  3  years  experience  in 
innovation  and  design  of  com¬ 
plex  programming  solutions 
including  a  minimum  of  2  years 
experience  in  a  recognized  com¬ 
puter  research  laboratory.  40 
hours  per  week.  Employer  is 
located  in  Aurora,  Nebraska,  a 
city  with  a  population  of  4400. 
Send  resume  to  Nedelco,  Inc., 
Attn.  HR  Department,  1001  12th 
Street,  Aurora,  NE  68818. 


❖  PUGET  SOUND  ENERGY 

Puget  Sound  Energy  (PSE),  the  largest  energy  utility  in  the  WA,  is  seek¬ 
ing  applicants  to  fill  the  position  of  Sr.  System  Analyst  at  its  office  located 
in  Bellevue,  WA.  In  order  to  be  considered  for  this  position  you  must  com¬ 
plete  an  online  application  on  our  website,  www.pse.com  and  attach  a 
resume. 

Sr  System  Analyst  1693 

Closes  10/31/05.  Maintain  and  support  application  programs,  systems, 
and  procedures  for  PSE's  Energy  Trader  system  applications. 
Responsible  for  the  development  and  maintenance  of  PSE's  KWI  Energy 
Risk  System  network,  servers,  security,  data,  and  applications  support. 
Any  suitable  combination  of  education,  training  or  experience  with  the 
KWI  Energy  Risk  System  for  electric  and  gas  energy  system  is  accept¬ 
able. 

PSE  offers  a  highly  competitive  compensation  and  benefits  package.  PSE 
is  an  Equal  Opportunity  employer.  We  encourage  persons  of  diverse 
backgrounds  to  apply. 


Manager,  Research  Data.  Chi¬ 
cago,  IL.  Responsible  for  man¬ 
aging  projects  and  supervising 
others  in  the  delivery,  cleaning 
and  storing  of  historical  market 
data  that  is  used  to  drive  Cita¬ 
del's  proprietary  trading  models. 
Responsible  for  gathering  data 
needs  from  various  quantitative 
researchers  within  Citadel's 
GMQS  business.  Responsible 
for  contracting  and  negotiating 
with  various  exchanges  and 
vendors  for  market  data.  Manag¬ 
ing  the  procurement  and  deliv¬ 
ery  of  the  data.  Uploading/stag¬ 
ing  the  data.  Transforming  the 
data  into  various  data  stores  for 
Citadel’s  internal  use.  Working 
with  quantitative  researchers  on 
access  patterns  for  the  data. 

Qualifications  include  a  mini¬ 
mum  of  a  Masters  degree  in 
Computer  Science  or  a  related 
Engineering  discipline  or  the  for¬ 
eign  equivalent.  Must  have  2 
years  experience  in  utilizing 
financial  market  data  for  building 
financial  models. 

Qualified  candidates  should 
submit  a  cover  letter  and  resu¬ 
me,  job  reference  R-0035,  to 
itjobs0035@citadelgroup.com. 
Principals  only  need  apply. 
CITADEL  IS  AN  EQUAL  OP¬ 
PORTUNITY  EMPLOYER. 


SENIOR  SYSTEMS  ANALYST 

Roseburg  Forest  Products  has 
an  opening  for  a  Senior  Systems 
Analyst  to  assess,  configure  and 
implement  finance,  distribution, 
advanced  warehouse  and/or  op¬ 
erations  modules  using  current 
analysis  techniques  and  JD 
Edwards  ERP  software. 

Minimum  Requirements:  Mas¬ 
ters  Degree  in  Information  Man¬ 
agement  or  Systems  Analysis. 
In  lieu  of  the  Masters  Degree, 
Employer  will  also  accept  a  Ba¬ 
chelor  in  Information  Manage¬ 
ment  or  Systems  Analysis  plus 
five  years  of  progressively  re¬ 
sponsible  experience  as  a  Sys¬ 
tems  Analyst.  All  Candidates 
must  also  have  2  years  of  expe¬ 
rience  with  JD  Edwards  ERP 
Software. 

All  Candidates  must  have  legal 
authority  to  permanently  work  in 
the  US.  Applicants  meeting  all 
requirements,  please  send  resu¬ 
me  and  salary  history  (electroni¬ 
cally  preferred)  to: 

Human  Resources 
Roseburg  Forest  Products  Co. 

PO  Box  1088 
Roseburg,  OR  97470 
Toll  free  fax  (877)  407-7259 
Email:  resumes@rfpco.com 

AN  EQUAL 

OPPORTUNITY  EMPLOYER 


Stanford  Technology  Partners 
Inc.  is  an  Information  Technolo¬ 
gy  consulting  company  with  its 
clients  across  the  USA.  We  seek 
an  UNIX  Solaris  System  Admin¬ 
istrator.  Duties  include  systems 
administration  for  global  e-busi- 
ness  retail  exchange,  scalability 
analysis  and  capacity  planning, 
expertise  on  sun  clustering  with 
a  strong  focus  on  design  and 
architecture,  assist  with  transi¬ 
tion  to  co-location  environments, 
establish  and  maintain  close 
working  relationships  with  appli¬ 
cation  teams  and  users  in  the 
design,  development,  tuning, 
and  problem  resolution  of  sys¬ 
tems,  communicate  effectively  in 
meetings  and  discussions, 
maintain  software  license  inven¬ 
tory  and  Perform  emergency 
problem  resolution.  Job  is  locat¬ 
ed  in  Herndon,  VA  If  interested, 
please  send  resume  to:  Stanford 
Technology  Partners  Inc.,  289 
Boston  Turnpike  Suite  #6 
Shrewsbury,  MA  01545  e-mail: 
recruiter@stpincusa.com. 


Programmer  Analyst.  Analyze 
requirements  and  propose  solu¬ 
tions  to  business  applications 
based  upon  user  requirements; 
analyze  proposed  solutions  and 
impact  on  business  applica¬ 
tions;  code,  test,  debug,  docu¬ 
ment  and  maintain  programs 
while  following  the  components 
of  a  systems  lifecycle.  Must 
have  Bachelor's  degree  in 
Computer  Science,  Engg.  or 
related,  one  year  experience 
including  J2EE,  Oracle,  UNIX 
and  Shell  programming.  Send 
resume  to:  APAC  Customer 
Services,  Inc,,  Attn:  Catherine 
Nelson,  6  Parkway  North,  Deer¬ 
field,  IL  60015.  EOE/AA  APAC 
CUSTOMER  SERVICES,  INC. 
is  not  affiliated  with  APAC,  INC., 
the  road  paving  and  construc¬ 
tion  materials  company. _ 


Senior  Quality  Assurance  An¬ 
alyst.  Chicago,  IL,  Responsible 
for  the  following  tasks:  planning 
a  testing  time  period;  designing 
a  test  approach;  receiving  and 
testing  a  new  functionality; 
regression  testing  existing  func¬ 
tionality;  providing  testing  results 
reports;  and,  approving  releas¬ 
es.  Create  Unix  scripts  and  writ¬ 
ing  programs  in  Visual  Basic. 
Responsible  for  coordinating 
with  Citadel's  front,  middle  and 
back  office  business  units  to 
understand  business  needs  and 
new  development,  and  translate 
those  into  test  plans  and  test 
cases.  Determine  significant 
tasks  and  design  requirements 
for  each  release  and  establish 
feasibility  and  staffing  plans. 
Work  with  developers  to  decom¬ 
pose  technical  requirements  into 
use  cases  and  conduct  positive 
and  negative  testing.  Diagnose 
problems  found  by  reviewing  log 
files,  database  inquiries,  and 
code  and  communicate  prob¬ 
lems  to  the  developers.  Utilize 
Linux,  Unix  and  Windows  tech¬ 
nology  platforms,  C++  and 
PERL. 

Qualifications  include  a  bache¬ 
lor's  degree  in  Computer  Sci¬ 
ence,  Engineering  or  Mathemat¬ 
ics.  Must  have  four  years  of  rel¬ 
evant  experience.  Must  have 
experience  in  Linux,  Unix  and 
Windows  technology  platforms, 
C++  and  PERL.  Must  also  have 
experience  in  creating  Unix 
scripts  and  writing  programs  in 
Visual  Basic. 

Qualified  candidates  should 
submit  a  cover  letter  and  resu¬ 
me,  job  reference  R-0036,  to 
itjobs0036@citadeigroup.com. 
Principals  only  need  apply. 
CITADEL  IS  AN  EQUAL  OP¬ 
PORTUNITY  EMPLOYOER. 


Petrotech  Data  Mgmt 
Software  Eng  w/exp.  in 
seismic  data  manage¬ 
ment.  Send  resume  to  HR, 
SAIC,  1049  W,  5th  Ave., 
Anchorage,  Alaska  99501 
or  etsg.Alaska@saic.com 
Must  ref  job  code 
EAG127870. 


Chief,  Information  Systems  Offi¬ 
cer  wanted  by  proprietary  trad¬ 
ing  firm  loc  in  Chicago  to  direct  & 
coord  activities  of  comp  prgmrs 
working  as  part  of  project.  Ana¬ 
lyze  science,  engg,  business  & 
all  other  data  processing  prob¬ 
lems  for  application  to  electronic 
data  processing  systems.  Dvlp 
new  subroutines  or  expand 
prgm  to  simplify  stmt,  prgmg,  or 
coding  for  future  problems.  Must 
have  Master's  Deg  in  Comp  Sci 
&  1  yr  exp  in  job  offd  or  any  Lead 
Dvlpr/Comp  Engr  position.  Mail 
resume  to:  Renee  Whittingham, 
Jump  Trading,  LLC  600  W. 
Chicago,  Ste  825,  Chicago,  IL 
60610.  No  calls. 


TECHNOCREST  SYSTEMS, 
INC.  Worth,  Illinois  Seeking  a 
Computer  Support  Specialist  to 
provide  technical  assistance  to 
computer  systems  users  in  per¬ 
son,  via  telephone  or  from 
remote  location.  Travel  to  client 
office  work  stations  to  handle 
troubleshooting  and  repair  and 
perform  warranty  services  for 
DELL,  Compaq,  Apple  and  IBM 
desktop  and  laptop  computers. 
Requires  Bachelor's  degree  in 
Computer  Science  or  Electronic 
Engineering. Send  Resume  to: 
Human  Resources,  Technocrest 
Systems,  Inc.  3125  S.  Pickwick 
Place,  Springfield,  MO  65804 
job  code:  TSI034. 
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Opportunity 
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Computer  Systems  Manager. 
Direct  offshore  software  eng. 
teams  in  dev.  of  software  app. 
projects.  Manage  software  de¬ 
sign  and  dev.  for  final  delivery  & 
QA.  Plan  &  monitor  project 
implement.,  resources  &  assign- 
mts.  Provide  tech,  guidance. 
Freq't  overseas  travel  req.  Must 
have  MS  in  CS  or  El.  Eng.  or 
equiv;  2  yrs  exp  as  a  lead  in 
enterprise  app  projects  incl  1  yr 
exp  in  leading  software  dev  with 
offshore  teams  and  1  yr  exp  in 
Conf  and  Change  Mgmt,  Ra¬ 
tional  Unified  Process  and  Tools, 
Solaris,  Windows,  J2EE,  Re¬ 
lational  Database  Design,  SQL, 
Sybase  PowerBuilder.  Job  Loca¬ 
tion:  Bellevue,  WA.  Send  resu¬ 
me  to  nat'l  office:  Attn  HR  Mgr. 
Luxoft  USA,  Inc.  136  Summit 
Ave.  Suite  104  Montvale,  NJ 
07645. 


Code,  test,  implement, 
correct  data  base  for 
security.  Req.  Bachel¬ 
or's  of  Comp.  Science 
w/2  yrs.  exp.  or  as  a 
Data  process  analyst. 
Send  resume  to  J. 
Nortman,  Jaxon  In¬ 
vestments  Ltd.,  540 
Frontage  Rd.,  Ste. 
3245,  Northfield,  IL 
60093. 


TECHNOCREST  SYSTEMS, 
INC.  -  Springfield,  MO  Seeking  a 
Computer  Support  Specialist  to 
provide  technical  assistance  to 
computer  systems  users  in  per¬ 
son,  via  telephone  or  from 
remote  location.  Travel  to  client 
office  work  stations  to  handle 
troubleshooting  and  repair  and 
perform  warranty  services  for 
DELL,  Compaq,  Apple  and  IBM 
desktop  and  laptop  computers. 
Requires  Bachelor's  degree  in 
Computer  Engineering,  Elec¬ 
tronics  Engineering  or  Com¬ 
munications  Engineering. Send 
Resume  to:  Human  Resources, 
Technocrest  Systems,  Inc.,  3125 
S.  Pickwick  Place,  Springfield, 
MO  65804  job  code:  TSI0659. 


TECHNOCREST  SYSTEMS, 
INC.  Irving,  TX  Seeking  a  Com¬ 
puter  Support  Specialist  to  pro¬ 
vide  technical  assistance  to 
computer  systems  users  in  per¬ 
son,  via  telephone  or  from 
remote  location.  Travel  to  client 
office  work  stations  to  handle 
troubleshooting  and  repair  and 
perform  warranty  services  for 
DELL,  Compaq,  Apple  and  IBM 
desktop  and  laptop  computers. 
Requires  Bachelor's  degree  in 
Computer  Engineering,  Elec¬ 
tronics  Engineering  or  Commun¬ 
ications  Engineering. Send  Re¬ 
sume  to:  Human  Resources, 
Technocrest  Systems,  Inc.  3125 
S.  Pickwick  Place,  Springfield, 
MO  65804  job  code:  TSI0466. 


TECHNOCREST  SYSTEMS, 
INC.  Laguna  Hills,  CA  Seeks  a 
Computer  Support  Specialist  to 
provide  technical  assistance  to 
computer  systems  users  in  per¬ 
son,  via  telephone  or  from 
remote  location.  Travel  to  client 
office  work  stations  to  handle 
troubleshooting  and  repair  and 
perform  warranty  services  for 
DELL,  Compaq,  Apple  and  IBM 
desktop  and  laptop  computers. 
Requires  Bachelor's  degree  in 
Computer  Engineering,  Elec¬ 
tronics  Engineering  or  Commun¬ 
ications  Engineering.  Send  Res¬ 
ume  to:  Human  Resources, 
Technocrest  Systems,  Inc.  3125 
S.  Pickwick  Place,  Springfield, 
MO  65804  job  code:  TSI0643. 


DATA.  WIRELESS.  NETWORK. 

Yes,  you’re  in  the  right  neighborhood. 


What  can  a  company  like  State  Farm'  possibly  offer  in  the  way  of  I.T.? 
Just  one  of  the  nation’s  largest  computer  networks.  The  drive  of  a 
Fortune  25  company.  And  a  wealth  of  I.T.  opportunities.  How  do  you 
like  the  neighborhood  so  far?  We  Live  Where  You  Live.® 


STATE  FARM  IS  THERE: 


LIKE  A  GOOD  NEIGHBOR 


Providing  Insurance  and  Financial  Services 


For  more  information,  visit  statefarm.com  or  email  jobopps.corpsouth@statefarm.com. 
State  Farm  •  Home  Offices:  Bloomington,  IL  •  An  equal  opportunity  employer 


Database 

Administrator 

AMAX  Engineering  Corp. 
Fremont,  CA 

Dvlp,  test  &  implement 
database.  Resume  fax 
(510)497-8889  or  email 
hr@amax.com.  EOE. 


PROGRAMMER  ANALYST 
-  Needed  w/2yrs  exp  to  Ana¬ 
lyze,  design  &  develop  client 
server  applic.  using  VB, 
ASP,  Oracie  &  SQL  Server 
on  Windows,  DOS  &  UNIX 
OS.  Analyze,  review  &  alter 
programs  using  VB.net, 
ASP.net,  Java  Script,  HTML 
&  DHTML.  Mail  resumes  to: 
BCC  USA,  Inc.  43  Stouts 
Lane,  Monmouth  Jet.,  NJ 
08852.  Job  loc.  Monmouth 
Jet.,  NJ  or  in  unanticipated 
locations  in  the  U.S. 


Noble  Communications,  Inc. 
seeks  Database  Administrator 
to  work  in  Orlando,  FL.  Create 
and  design  computer  data¬ 
bases,  test,  and  implement 
the  database  applying  knowl¬ 
edge  of  enterprise  database 
management  systems  and 
first,  second  and  third  normal¬ 
ization  designs.  Candidate 
must  have  Bachelor's  in 
Management  Information 
Systems  and  2  yrs.  experi¬ 
ence  in  job  offered.  Submit 
resume  to  Suleman  Jiwani  at 
fax  number  (407)  363-0811. 
Put  job  code  DA-01. 


Quantitative  Analyst,  Intermedi¬ 
ate  (f/t,  Manh).  Research  risk  & 
performance  analysis  of  security 
portfolios  applying  mathemati¬ 
cal/statistical  methods;  simulate 
new  products  using  Monte  Carlo 
study  technique  &  bootstrap¬ 
ping:  employ  multivariate  factor 
analysis  to  estimate  risk  para¬ 
meters  &  portfolio  characteris¬ 
tics.  Perform  application  dvlpt, 
report  generation,  &  dbase 
mgnt.  Work  w.  Unix.  Windows. 
C++.  Java,  MATLAB,  Visual  Ba¬ 
sic,  SQL,  &  dsgn  &  dvlp  dbase. 
Rqts:  Master  in  Ind.  Engg,  Fin  or 
Econ,  and  4  yrs  exp  in  job.  Mail 
resume  to  Tammy  Sheffer, 
Oppenheimerfunds,  225  Liberty 
St,  11th  FI,  NY,  NY  10281. 


Oracle  Database  Administrator 
(Fullerton.  CA)  sought  by  Wine 
Country  Gift  Baskets,  Inc.  to: 
provide  Oracle/Linux/HP-Unix 
administration  of  both  dvlpmt  & 
high-availability  production  sy¬ 
stems;  assist  in  architecture  of 
a  scalable,  reliable,  high  pro¬ 
duction  system;  &,  dvlp  & 
maintain  disaster  recovery  pre¬ 
paredness.  BS  in  Computer 
Engg  w/min.  of  5  yrs.  exp. 
w/Oracle/Linux/HP-Unix.  Send 
resume  to:  wcemployment@ 
winecountrygiftbaskets.com. 
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Banks 

and  also  consider  whether  au¬ 
thentication  technologies  are 
user-friendly  enough. 

“It’s  a  cost-benefit  issue,  and 
[one  of]  trying  to  make  sure 
you  don’t  put  any  additional 
inconveniences  on  your  cus¬ 
tomers,”  said  Donald  Duggan, 
chief  technology  officer  at  San 
Francisco-based  Bank  of  the 
West,  which  manages  $41  bil¬ 
lion  worth  of  assets. 

“As  a  consumer,  I  wouldn’t 
want  to  carry  a  token  around 
everywhere  I  went,”  Duggan 
said,  referring  to  token-based 
forms  of  authentication.  As  an 
alternative,  Bank  of  the  West  is 
evaluating  technology  from 
PassMark  Security  Inc.  that 
uses  the  combination  of  a  user- 
selected  image,  a  secret  phrase 
and  a  challenge  question  to  au¬ 
thenticate  users  who  are  trying 
to  access  banking  Web  sites. 

The  Federal  Financial  Insti¬ 
tutions  Examination  Council 
(FFIEC)  on  Oct.  12  released 
guidelines  that  call  on  banks 


to  upgrade  single-factor  au¬ 
thentication  processes,  which 
are  typically  based  on  user- 
names  and  passwords,  by 
adding  a  second,  stronger 
form  of  authentication.  Com¬ 
pliance  is  expected  by  the  end 
of  next  year. 

The  guidelines  leave  it  up  to 
the  banks  to  choose  the  kind 
of  authentication  technology 
they  want  to  implement.  But 
the  FFIEC,  an  interagency 
council  set  up  to  develop  stan¬ 
dards  for  the  auditing  of  finan¬ 
cial  institutions  by  govern¬ 
ment  bodies,  listed  options 
such  as  biometrics,  tokens  and 
one-time  passwords. 

The  FFIEC’s  guidelines 
don’t  have  the  weight  of  a  law 
and  are  more  like  a  set  of  best 
practices.  But  financial  institu¬ 
tions  will  be  audited  against 
them  as  of  the  end  of  2006  and 
will  be  written  up  by  examin¬ 
ers  if  they  aren’t  in  compli¬ 
ance,  said  a  spokesman  for  the 
Federal  Reserve  System. 

“I’m  not  a  big  fan  of  regula¬ 
tions  in  general,  but  this  one 
has  the  right  intent,”  said 
Kevin  Doyle,  information  se- 


Banking  Guide 

The  federal  guidelines  on  end- 
user  authentication  include  the 
following  key  points: 

■  Single-factor  authentication 
is  inadequate  as  the  only  end-user 
control  mechanism  for  high-risk 
banking  transactions. 

■  Exploitation  of  single-factor 
authentication  schemes  frequently 
results  in  account  fraud  and 
identity  theft. 

■  The  authentication  techniques 
that  financial  institutions  use 

should  be  appropriate  to  the 
risks  associated  with  their 
products  and  services. 

SOURCE:  FEDERAL  FINANCIAL  INSTITUTIONS 
EXAMINATIONS  COUNCIL,  ARLINGTON,  VA. 

curity  officer  at  the  Pennsylva¬ 
nia  State  Employees  Credit 
Union  in  Harrisburg.  “Online 
threats  are  going  more  and 
more  toward  the  end  users, 
and  the  FFIEC  is  simply  react¬ 
ing  to  that  trend.” 

In  March,  the  credit  union 
started  rolling  out  a  two-factor 
authentication  technology 
from  Cyota  Inc.  that  analyzes 


and  scores  risks  on  individual 
online  banking  transactions. 
The  scoring  is  based  on  crite¬ 
ria  such  as  the  end  user’s  com¬ 
puter,  IP  address,  geographic 
location  and  transaction  histo¬ 
ry.  Users  trying  to  conduct  on¬ 
line  banking  transactions  that 
the  system  flags  as  being  high 
risk  are  authenticated  via  tele¬ 
phone  calls  or  a  challenge- 
and-response  process. 

Calculating  Costs 

The  cost  of  implementing 
PassMark’s  technology  for  a 
bank  with  50,000  online  users 
is  $1  per  user  annually,  said 
Steve  Klebe,  a  vice  president 
at  the  Redwood  City,  Calif.- 
based  vendor.  For  larger 
banks,  the  yearly  per-user  cost 
can  be  less  than  the  price  of  a 
single  postage  stamp,  he 
added.  Cyota’s  technology 
also  costs  less  than  $1  per  user 
annually,  according  to  the 
New  York-based  company. 

In  contrast,  token-based  au¬ 
thentication  can  easily  cost  up 
to  $10  per  user  each  year,  said 
Forrester  Research  Inc.  ana¬ 
lyst  Jonathan  Penn.  Its  cost 


and  complexity  tends  to  limit 
the  use  of  tokens  to  high-value 
transactions  or  internal  appli¬ 
cations.  For  instance,  ETrade 
Financial  Corp.  in  March 
launched  a  token-based  ser¬ 
vice  for  clients  with  accounts 
worth  more  than  $50,000. 

“There  seems  to  be  a  lot  of 
diversity”  when  it  comes  to 
authentication  approaches, 
said  Scott  Mackelprang,  vice 
president  of  security  and  com¬ 
pliance  at  Digital  Insight  Corp. 
in  Calabasas,  Calif.  “It  goes 
without  saying  that  what  you 
choose  has  to  be  scalable  and 
easy  enough  for  the  nontech¬ 
nical  user  to  use.” 

Digital  Insight,  a  provider  of 
outsourced  Internet  banking 
services,  plans  to  soon  start 
offering  multifactor  authenti¬ 
cation  capabilities  based  on 
technology  from  TriCipher 
Inc.  in  San  Mateo,  Calif.  Tri- 
Cipher  lets  consumers  use 
their  computers  as  an  authen¬ 
tication  credential  when  con¬ 
ducting  online  transactions  or 
store  portions  of  their  creden¬ 
tials  on  personal  devices  such 
as  MP3  players.  ©  57745 
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Hurd 

nology  Forum  delivered  simi¬ 
lar  messages,  also  without  any 
product-by-product  details. 

During  a  keynote  session  at 
the  Gartner  event,  Hurd  said 
his  goal  is  to  “double  down” 
on  HP’s  core  offerings.  He 
pointed  to  the  company’s  cash 
hoard  of  $14.5  billion  and  sug¬ 
gested  that  the  recent  acquisi¬ 
tions  of  RLX  Technologies 
Inc.,  Peregrine  Systems  Inc. 
and  AppIQ_Inc.  won’t  be  the 
last  ones  HP  makes  to  shore 
up  its  key  product  lines. 

No  Radical  Changes 

Nonetheless,  Hurd’s  over¬ 
arching  message  was  one  of 
stability.  He  said  HP  remains 
committed  to  the  Itanium 
processor  and  the  company’s 
adaptive  enterprise  frame¬ 


work.  But  Hurd  also  said  HP 
has  to  “make  sure  that  we  can 
show  up  with  products  that 
are  deliverable  against  that 
framework,  and  I 
think  we  can  do  a 
better  job  with  that.” 

Among  the  IT 
managers  who 
attended  Hurd’s 
session  was  Mark 
Shozda,  CIO  at  PNC 
Advisors,  a  unit 
of  The  PNC  Finan¬ 
cial  Services  Group 
Inc.  in  Pittsburgh. 

“I  thought  he  was 
broad  and  general,” 

Shozda  said.  “Maybe 
some  more  specifics  would 
have  been  good.” 

But  other  HP  users  who  had 
their  IT  worlds  turned  upside 
down  by  Carly  Fiorina,  Hurd’s 
predecessor,  said  the  new 
CEO’s  comments  were  sooth¬ 
ing.  Fiorina’s  tenure  at  HP  in¬ 


cluded  the  controversial  ac¬ 
quisition  of  Compaq  Comput¬ 
er  Corp.  as  well  as  a  shift  to¬ 
ward  Itanium-based  servers 

and  away  from  wide¬ 
ly  used  technologies 
such  as  the  compa¬ 
ny’s  PA-RISC  proc¬ 
essors  and  HP  e3000 
systems. 

“We  had  enough 
radical  change  with 
Carly,”  said  Arnold 
Mirow,  an  IT  coordi¬ 
nator  for  the  Los 
Angeles  County 
Sheriff’s  Department 
who  attended  the  FIP 
Technology  Forum. 
Mirow  added  that  he  was 
pleased  with  the  messages  he 
heard  from  HP  executives  there. 

At  the  Gartner  conference, 
Hurd  dispelled  the  idea  that 
HP  would  move  into  the  high- 
level  business  consulting  mar¬ 
ket.  That  comment  was  a  key 


take-away  for  Rick  Schwartz, 
CIO  at  HarperCollins  Publish¬ 
ers  Inc.  in  New  York.  HP  needs 
to  stay  focused  on  its  technol¬ 
ogy,  Schwartz  said.  “I  actually 
think  it’s  a  smart  move.  They’ve 
got  their  hands  full.” 

Gartner  analyst  Carl 
Claunch  said  that  if  changes 
are  made  to  HP’s  product  line¬ 
up,  they  will  likely  be  relative¬ 
ly  small,  along  the  lines  of  the 
company’s  recent  decision  to 
get  out  of  the  business  of  sell¬ 
ing  iPod  devices. 

Mike  Trimbach,  an  Open- 
VMS  manager  at  Computer 
Sciences  Corp.  in  El  Segundo, 
Calif.,  said  he  took  the  general 
message  delivered  by  HP  offi¬ 
cials  last  week  as  a  positive 
sign  for  the  future  of  the  oper¬ 
ating  system  with  which  he  has 
worked  for  much  of  his  career. 

HP  has  ported  OpenVMS  to 
Itanium.  And  Trimbach  noted 
that  at  a  session  on  OpenVMS 


at  the  HP  Technology  Forum, 
HP  representatives  said  that 
the  company  has  won  some 
new  customers  on  the  operat¬ 
ing  system,  which  traces  its 
roots  to  the  1970s  and  the  for¬ 
mer  Digital  Equipment  Corp. 
The  talk  of  new  users  “has 
been  encouraging,”  Trimbach 
said.  ©  57744 


Correction 

A  QUOTE  ABOUT  Computer 
Associates  International  Inc.’s 
BrightStor  ARCserve  data  backup 
tool  was  mistakenly  included  in  a 
sidebar  about  storage  resource 
management  (“Defining  the  Stor¬ 
age  Path”)  that  was  part  of  the 
Knowledge  Center  special  report  in 
last  week’s  issue.  In  addition,  the 
quote  was  incorrectly  attributed  to 
Wayne  N.  Adams,  chairman  of  the 
Storage  Networking  Industry  Asso¬ 
ciation  in  San  Francisco. 


HURD  says  HP  can 
do  a  better  job”  of 
creating  products 
for  the  company’s 
adaptive  enterprise 
framework. 
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Trust. 


‘Computerworld’s  approach  of  using 


real-world  testimonies  is  really  the  key.  If  I 
wanted  a  vendor  opinion,  I’d  call  a  vendor  up  . . . 


challenges  and  when  I  see  my  peer  talking  about 
technology  innovation,  it  has  much  more  weight.’ 

Steve  Bandrowczak,  VP/CIO,  DHL  Express 
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Free-Market  Dance 


WHO  GETS  TO  LEAD?  That’s  the  big  question  in  the 

ongoing  dance  between  Microsoft  and  the  state  of 
Massachusetts.  For  those  who  have  been  blissful¬ 
ly  unaware  of  the  situation,  it  comes  down  to  this: 
Massachusetts  has  decided  that  its  official  format 
for  internal  documents  going  forward  will  be  OpenDocument,  an 
XML  standard  from  the  OASIS  consortium.  Microsoft  doesn’t  want 
to  add  that  format  to  Microsoft  Office.  Result:  Massachusetts  state 
agencies  will  soon  begin  to  migrate  from  Microsoft  Office  to  appli¬ 
cations  that  support  OpenDocument. 

Does  that  sound  simple  enough?  It  is.  But  oh,  the  noise! 


Microsoft  is  yowling  that  it’s  being  unfairly  ex¬ 
cluded  from  Massachusetts’  IT  buying  decisions. 

Open-source  advocates  are  crowing  about  the 
huge  victory  they  say  they’ve  won,  because  the 
open-source  OpenOffice  uses  OpenDocument. 

Pundits  are  pounding  their  usual  tables,  in¬ 
sisting  either  that  Massachusetts  has  no  busi¬ 
ness  persecuting  Microsoft  or  that  this  is  the 
beginning  of  open-source  iiber  alles. 

These  folks  need  to  cut  back  on  the  caffeine. 

It’s  true  that  this  Massachusetts  decision  puts 
OpenOffice  and  other  open-source  office  soft¬ 
ware  in  the  hunt  for  80,000  seats  in  Massachu¬ 
setts  government  offices.  Does  that  make  this 
an  open-source  Armageddon  for  Microsoft? 

Get  real.  Sun’s  StarOffice  uses  OpenDocu¬ 
ment  too.  Corel  says  it’s  adding  OpenDocument 
to  WordPerfect  Office.  State  offices  can  even 
continue  to  use  Microsoft  Office,  as  long  as 
they  convert  their  documents  to  OpenDocu¬ 
ment  format  when  saving  them. 

In  other  words,  it’s  still  the  same  old  open- 
source-vs.-proprietary-products  competition. 

And  it’s  true  that  Massachusetts  agencies 
are  abandoning  Microsoft’s  proprietary  docu¬ 
ment  formats  in  favor  of  an  open 
standard.  Is  that  a  persecution  of 
Microsoft? 

Hardly.  It’s  the  equivalent  of  de¬ 
ciding  to  use  ASCII  instead  of  IBM’s 
mainframe  character-coding  sys¬ 
tem,  EBCDIC.  Vendors  love  their 
proprietary  formats.  That  doesn’t 
mean  customers  will  love  them  too. 

Despite  all  the  posturing  and  hoo- 
hah,  there’s  really  just  one  major 
issue  here:  Who  gets  to  make  IT 
decisions  —  buyers  or  sellers?  The 
people  paying  the  money,  or  the 
people  getting  the  money? 


You  know  the  answer.  It’s  the  buyers.  They’re 
paying  the  money.  They  get  to  make  the  choices. 
That’s  how  a  free  market  works. 

And,  it  turns  out,  it  works  a  lot  better  when 
customers  throw  their  weight  around  instead  of 
meekly  accepting  whatever  vendors  offer  them. 

Notice  I  said  better,  not  more  efficiently. 

Every  process,  including  IT  buying,  is  most 
efficient  when  there’s  100%  cooperation  and 
no  competitive  friction  —  in  other  words, 
when  everybody  follows  the  same  leader.  Then 
there’s  no  duplication  of  effort,  no  wasted  re¬ 
sources,  no  choices  to  make. 

In  fact,  no  choices  —  period. 

And  who  really  wants  that?  It  sounds  appeal¬ 
ing  to  vendors,  but  only  if  they’re  the  ones  that 
get  to  lead.  They  don’t  want  to  follow. 

It  also  sounds  appealing  to  harried  corporate 
IT  people  looking  for  a  safe  path  through  an 
ever-changing  IT  landscape.  But  that  works 
only  if  that  beaten  path  heads  in  a  direction  that 
matches  the  company’s  business  needs. 

If  it’s  not,  you  get  Massachusetts  and  Micro¬ 
soft  fighting  over  who  gets  to  lead. 

Who  will  win?  We  all  will.  Really.  Vendors  re¬ 
spond  only  when  they’re  pushed. 
Customers  push  only  when  they 
clearly  understand  their  IT  needs. 
The  results  so  far  of  this  pushing 
match  of  a  dance:  Massachusetts 
agreed  not  to  dump  Office  in  cer¬ 
tain  cases,  such  as  when  the  user  is 
disabled.  And  Microsoft  now  says  it 
might  add  OpenDocument  to  Office, 
depending  on  customer  demand. 

Let’s  hope  they  keep  dancing.  It 
won’t  be  pretty.  But  when  vendors 
and  customers  both  lead,  it  means 
better  focus  and  more  choices  for 
us  all.  O  57644 


frank  hayes,  Computer- 
world's  senior  news  colum¬ 
nist,  has  covered  IT  for  more 
than  20  years.  Contact  him  at 

frank.hayes@camputerworld.com. 


Mixed  Messages 

Support  pilot  fish  gets  a  call  from  the  company  presi¬ 
dent,  whose  mouse  cursor  is  moving  erratically.  Cord¬ 
less  mouse?  asks  fish,  it  might  be  the  batteries.  “Got  a 
call  15  minutes  later  from  an  assistant  to  let  me  know 
that  took  care  of  the  problem,”  says  fish.  “Next  day,  I 
get  hauled  down  to  the  boss’s  office,  who  got  a  call 
from  his  boss,  the  CFO.  Both  execs  want  to  know 
about  the  automatic  ‘your  cail  has  been  closed'  e-mail 
that  was  sent  to  the  president  -  and  why  IT  is  spend¬ 
ing  so  much  time  tracking  the  replacement  of  mouse 
batteries.  Oh,  and  they  passed  along  thanks  for  my 
prompt  assistance.” 

Gone  AIiam/  fish,  “it 

This  system  SHARK  matched  up 

TANK* 


conversion  proj¬ 
ect  is  wei!  under 
way;  it’s  been 
months  since  users 
signed  off  on  the  list  of 
new  reports  that  will  be 
created  and  those  that 
will  become  obsolete. 
“After  the  first  test  run  of 
the  new  conversion,  one 
user  was  irate,”  reports 
pilot  fish  working  on  the 
project.  “He  insisted  that 
his  obsolete  reports 
were  missing!  We  had  to 
explain  to  him  the  defini¬ 
tion  of  obsolete 

Gone  But  Not 
Forgotten 

Sysadmin  pilot  fish  hur¬ 
riedly  submits  a  request 
for  a  day  off  with  his 
company’s  new  Web- 
based  system  for  track¬ 
ing  time  off.  “Usually  I 
get  a  notification  back 
right  away,  but  I  didn’t 
get  anything  back  that 
day,”  says  fish.  But  next 
morning  he  hears  from 
the  system’s  developer, 
who’s  heard  from  the  HR 
manager,  who’s  heard 
from  a  manager  in  the 
corporate  office.  “Turns 
out  I  had  mistakenly 
entered  my  phone  exten¬ 
sion  instead  of  my  em¬ 
ployee  ID  when  filling 
out  the  request,”  says 


with  the  ID  of 
a  deceased 
employee. 

The  manager  at  corpo¬ 
rate  was  rather  upset 
;  that  a  former  employee 
j  of  his  who  had  passed 
j  away  was  requesting  a 
j  day  off.” 

: 

|  Or  Something 

j  Pilot  fish  responsible  for 
;  technology  purchasing 
|  gets  a  request  from  a 
j  user:  “Ernie  came  up 
j  and  said  they  need  some 
i  money  for  something  to 
|  make  computers  run 
j  faster,  better  or  some- 
j  thing.  Please  use  line 
j  item  5440-61265  in  the 
!  amount  of  $500. 

|  Thanks.” 

|  Concept  Guy 

!  Marketing  manager  tells 
j  developer  pilot  fish  he 
j  wants  a  new  report  - 
I  one  that  will  track  cus- 
|  tomer  life  retention  sta- 
j  tistics.  But  what  would 
j  be  the  formula  for  calcu- 
j  lating  that?  puzzled  fish 
j  asks  -  something  like 
j  today’s  date  minus  the 
j  date  they  signed  up 
j  divided  by  the  total  rev- 
j  enue?  Marketing  man- 
i  ager:  “That’s  not  my  job! 
j  My  job  is  to  come  up 
:  with  the  concept.!” 


©HERE’S  SHARKYS  CONCEPT:  You  send  me  your 
true  tale  of  IT  life  at  sharky@computerworld.com, 
and  I  send  you  a  snazzy  Shark  shirt  if  I  use  it.  And  check  out 
the  daily  feed,  browse  the  Sharkives  and  sign  up  for  Shark 
Tank  home  delivery  at  computerworld.com/sharky. 
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CHANGING  THE  LANDSCAPE  OF 
BUSINESS  INTELLIGENCE! 


[Integrating  financial  management  and  BI  to  create  the  first  Business  Performance  Management  system.] 


INTRODUCING  HYPERION  SYSTEM™  9 


Now  you  can  attain  performance  visibility  and  take  immediate  action  to  solve 
business  problems  with  the  new  Hyperion  System  9.  Built  as  a  single  modular 
system,  Hyperion  System  9  increases  productivity  while  reducing  risk  and  TCO. 
It’s  straightforward  for  IT  to  integrate  with  database  and  transaction  systems. 
And  it’s  even  simpler  for  end-users  to  learn  and  use.  See  the  launch  webcast: 
www.hyperion.com/launch 
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Hyperion 


VISIBILITY. 

PERFORMANCE. 
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Obviously,  great 
minds  think  alike. 


73%  of  the  FORTUNE  100®  and  76% 
of  the  European  100  compared  business 

collaboration  providers  and  came  to 
a  single  conclusion. 


Many  of  the  world's  most  successful  organizations  rely  upon  Sterling  Commerce  to  automate  their  business 
processes,  so  they  can  exchange  critical  information  with  their  trading  partners,  subsidiaries  and  customers. 
Reliably.  Securely.  And  regardless  of  the  application  being  used.  Sterling  Commerce  delivers  the  first  platform  to 
meet  all  the  complex  challenges  of  real-world  multi-enterprise  collaboration.  Find  out  what  so  many  companies 
already  know.  Speak  to  a  Sterling  Commerce  representative  today.  Or  visit  www.sterlingcommerce.com 
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